Configure dynamic variables on HTTP response pages

Configure dynamic variables on HTTP block response pages so that the custom block page can display contextual information about blocked sessions.

Procedure

Step 1

In the access control policy editor, select HTTP Responses from the More drop-down arrow at the end of the packet flow line.

If the controls are dimmed, settings are inherited from an ancestor policy, or you do not have permission to modify the configuration. If the configuration is unlocked, uncheck Inherit from base policy to enable editing.

Step 2

Locate the Block Response Page and Interactive Block Response Page settings.

Step 3

Select Custom from the drop-down menu for the Block Response Page or the Interactive Block Response Page option.

A pop-up window appears, prepopulated with system-provided code that you can replace or modify.

Step 4

Insert the desired dynamic variables into the HTML content using the prescribed syntax. For more information about the avialable dynamic variables, refer to Dynamic variables and their descriptions.

Step 5

Save the custom block page configuration.

Example configuration

<html>
<body>
  <h1>Access Blocked</h1>
  <p>User: {{USER}}</p>
  <p>URL: {{URL}}</p>
  <p>Category: {{CATEGORY}} (all: {{CATEGORY_LIST}})</p>
  <p>Reputation: {{REPUTATION}}</p>
  <p>Application: {{APPLICATION}}</p>
  <p>Source: {{SRC_IP}}:{{SRC_PORT}} ({{SRC_GEO}})</p>
  <p>Destination: {{DST_IP}}:{{DST_PORT}} ({{DST_GEO}})</p>
  <p>Protocol: {{PROTOCOL}} | VLAN: {{VLAN}}</p>
  <p>Rule: {{RULE_ID}} (rev {{RULE_REVISION}})</p>
  <p>Flags: appid={{APPID_PRESENT}} category={{CATEGORY_PRESENT}} url={{URL_PRESENT}}</p>
</body>
</html>

What to do next

Deploy configuration changes.