Welcome Page - Iframe

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Welcome Page - Iframe

L4 Transporter


we want to include a (external or internal) website via iframe in the welcome page. My test HTML site:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Frameset//EN"
<TITLE>Palo Alto Networks - GlobalProtect Welcome Page</TITLE>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link rel="stylesheet" type="text/css" href="/styles/falcon_content.css?v=@@version">
td {
font-family: Verdana, Arial, Helvetica, sans-serif;
font-weight: bold;
color: black; /*#FFFFFF; */
.msg {
    background-color: #ffff99;
    border-width: 2px;
    border-color: #ff0000;
    border-style: solid;
    padding-left: 20px;
    padding-right: 20px;
    max-height: 150px;
    height: expression( this.scrollHeight > 150 ? "150px" : "auto" ); /* sets max-height for IE */
    overflow: auto;
.alert {font-weight: bold;color: red;}

<BODY bgcolor="#F2F6FA">
<div align="center">
  <h1>Palo Alto Networks - GlobalProtect Welcome Page</h1>
<iframe src="http://www.whatismyip.com" width="70%" height="400" name="Test">


<div id="formdiv">

With this config it shows me just a white frame without any content....

Is some one familiar with this kind of confgiuration?




this code is the original one from PA. I exported the welcome page, modified it (see in the first post - the red letters) and then import it back. Its not the code of "view source"....

L4 Transporter

"When a webpage is loading an iframe, it displays a white background until when the iframe’s page is loaded". This is what happen with the first source code i posted.

Tried another html code:

<?xml version="1.0"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"/>
div{background-color:red; padding:5em;}

<iframe  style="visibility:hidden;" onload="this.style.visibility = 'visible';" src="http://www.it-things.com" ></iframe>

With this code i can see, that GlobalProtect doesn't try to load the welcome page iframe...

Could you verify with tcpdump or by running live http header or similar plugin within your browser how the http headers that are being sent towards your client looks like?

Im thinking if any of Security Headers on the Top 1,000,000 Websites: March 2013 Report could be a cause of this behaviour?

L4 Transporter


find in the attachment the live http log. Used my firefox.

IE and Firefox don't have any problems to display the HTML code (the last i sent). The GP Agent Welcome Window is the problem. It doesn't matter if i insert any internal oder external website - it doesn't want to load the iframe.

L4 Transporter


just sniff the traffic with wireshark during the client connects with GP and the welcome page appears. No any HTTP request are made. So it seem like the welcome page is a offline thing....Sadly! Or PaloAlto blockes any content loading in the Welcome/Help Page....really sadly...

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!