Learn how to customize the URL response pages using Explicit Proxy.
Where Can I Use This?
What Do I Need?
Prisma Access (Managed by Strata Cloud Manager) with Internet Access Policy
To enable this functionality, reach out to your Palo Alto
Networks account representative or partner.
Prisma Access version 6.0 and later
Prisma Access Mobile User license
URL response pages are a key component of URL filtering functionality. They provide users
with critical information, such as the user ID, attempted URL, URL category, and the
name of the matched security policy rule, along with a warning and the option to
proceed, when access to specific web content is blocked or restricted based on policy.
URL response pages notify users when access to a requested URL has been restricted.
You can customize these URL response pages with your organization's branding,
company-specific messaging, and, in some cases, explicit acknowledgment buttons or
redirection options to alternate sites.
This feature introduces an automatic generation of response pages based on
customer-uploaded templates and internet access policy rules providing a more flexible
and scalable solution with the following capabilities:
Administrators can upload templates without complexity or content
limits.
Templates are hosted by Prisma Access.
A simplified admin experience without need for admins to write
JavaScript to customize the block page.
Increased flexibility in defining match criteria with Internet Access Policy
Rules.
Support for multiple response pages.
Automatic generation of final response pages based on customer-uploaded templates
and configuration preferences
Prerequisites
You must enable explicit proxy. This feature is only
available on Strata Cloud Manager with Internet Access Policy.
Configure URL Response Pages
Customize a URL response page using the following steps:
Go to ConfigurationNGFW and Prisma AccessSecurity ServicesURL Access ManagementSettingsResponse Pages.
Change the Configuration Scope to
Global.
Enable Response Page Template to enable the feature.
The response page template allows you to
specify a response page for each Internet access policy rule. This feature
is available for Prisma Access only.
Change the Configuration Scope to Prisma
Access and Add Response Page Template to
add a new custom page.
Add a Name and a Description.
Under Template, you can either write HTML directly or
Upload Template, and Save the
configuration.
To see the preview of the page, toggle Preview.
Push Config to push the changes.
Go to Security ServicesSecurity Policy. Under Security Policy Rules, select Add RuleInternet Access Rule.
Select the template created under Response Page to attach
it to an Internet Access Policy Rule and Save.
You can't remove the templates if they are in
use in any of the Internet Access Policy Rule.
Push Config to push the changes.
Verify that the customized response page displays.