Cisco Cisco Web Security Appliance S170 Guía Del Usuario

Descargar
Página de 734
 
17-11
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
 
Chapter 17      Notifying End Users
Defining End-User Notification Pages Off-Box
Note
AsyncOS always includes all parameters in each redirected URL. If no value exists for a particular 
parameter, AsyncOS passes a hyphen (-).
Redirecting End-User Notification Pages to a Custom URL
To redirect end-user notification pages to a custom URL:
Step 1
Navigate to the Security Services > End-User Notification page, and click Edit Settings.
The Edit End-User Notification page appears.
Step 2
From the Notification Type field, choose Redirect to Custom URL.
Step 3
In the Notification Page URL field, enter the URL to which you want to redirect blocked websites.
URL_Cat
URL category that the URL filtering engine assigned to the transaction request. 
For a list of the different URL categories, see 
.
Note: AsyncOS for Web sends the entire URL category name for both 
predefined and user defined URL categories. It performs URL encoding on the 
category name, so spaces are written as “%20”. 
WBRS
WBRS score that the Web Reputation Filters assigned to the URL in the request.
DVS_Verdict
Malware category that the DVS engine assigns to the transaction.
For more information about malware categories, 
DVS_ThreatName
The name of the malware found by the DVS engine.
Reauth_URL
A URL that users can click to authenticate again if the user is blocked from a 
website due to a restrictive URL filtering policy. Use this parameter when the 
“Enable Re-Authentication Prompt If End User Blocked by URL Category or 
User Session Restriction” global authentication setting is enabled and the user is 
blocked from a website due to a blocked URL category.
To use this parameter, make sure the CGI script performs the following steps:
1. Get the value of 
Reauth_Url
 parameter.
2. URL-decode the value.
3. Base64 decode the value and get the actual re-authentication URL.
4. Include the decoded URL on the end-user notification page in some way, 
either as a link or button, along with instructions for users informing them they 
can click the link and enter new authentication credentials that allow greater 
access.
For more information, see 
Table 17-4
End-User Notification Parameters for Redirected URLs (continued)
Parameter Name
Description