Customize the URL Filtering Response Pages

The firewall provides predefined URL Filtering Response Pages that display by default when a user:
  • A user attempts to browse to a site in a category with restricted access.
  • A user submits valid corporate credentials to a site for which credential detection is enabled (Prevent Credential Phishing based on URL category).
  • Container Pages blocks a search attempt.
However, you can create your own custom response pages with your corporate branding, acceptable use policies, and links to your internal resources.
Custom response pages larger than the maximum supported size are not decrypted or displayed to users. In PAN-OS 8.0.11 and earlier releases, custom response pages on a decrypted site cannot exceed 8,191 bytes; the maximum size is increased to 17,999 bytes in PAN-OS 8.0.12 and later PAN-OS 8.0 releases.
  1. Export the default response page(s).
    1. Select DeviceResponse Pages.
    2. Select the link for the URL filtering response page you want to modify.
    3. Click the response page (predefined or shared) and then click the Export link and save the file to your desktop.
  2. Edit the exported page.
    1. Using the HTML text editor of your choice, edit the page:
      • If you want the response page to display custom information about the specific user, URL, or category that was blocked, add one or more of the supported Table 1.
      • If you want to include custom images (such as your corporate logo), a sound, or style sheet, or link to another URL, for example to a document detailing your acceptable web use policy, include one or more of the supported Table 2.
    2. Save the edited page with a new filename. Make sure that the page retains its UTF-8 encoding. For example, in Notepad you would select UTF-8 from the Encoding drop-down in the Save As dialog.
  3. Import the customized response page.
    1. Select DeviceResponse Pages.
    2. Select the link that corresponds to the URL Filtering response page you edited.
    3. Click Import and then enter the path and filename in the Import File field or Browse to locate the file.
    4. (Optional) Select the virtual system on which this login page will be used from the Destination drop-down or select shared to make it available to all virtual systems.
    5. Click OK to import the file.
  4. Save the new response page(s).
    Commit the changes.
  5. Verify that the new response page displays.
    From a browser, go to the URL that will trigger the response page. For example, to see a modified URL Filtering and Category Match response page, browse to URL that your URL filtering policy is set to block.

Related Documentation