Cisco Cisco Web Security Appliance S170 Guía Del Usuario
C O N F I G U R I N G T H E E N D - U S E R A C K N O W L E D G E M E N T P A G E
C H A P T E R 1 2 : N O T I F Y I N G E N D U S E R S
253
Consider the following rules and guidelines when enabling the end-user acknowledgement
page:
page:
• When a user is tracked by IP address, the appliance uses the shortest value for maximum
time interval and maximum IP address idle timeout to determine when to display the
end-user acknowledgement page again.
end-user acknowledgement page again.
• The first transaction from a user must be an HTTP request, and the user must agree to the
terms for all transactions to succeed. If users try to send an HTTPS or native FTP request
before an HTTP request, the HTTPS or native FTP request fails.
before an HTTP request, the HTTPS or native FTP request fails.
• When the Web Proxy restarts, the Web Proxy considers all users to have timed out, and it
displays the end-user acknowledgement page again. The Web Proxy may restart based on
different events, such as when the Default Proxy Log subscription changes or when
changes are made to the global authentication settings or FTP Proxy settings.
different events, such as when the Default Proxy Log subscription changes or when
changes are made to the global authentication settings or FTP Proxy settings.
• When the appliance is deployed in explicit forward mode and a user goes to an HTTPS
site, the end-user acknowledgement page includes only the domain name in the link that
redirects the user to the originally requested URL. If the originally requested URL contains
text after the domain name, that text is truncated.
redirects the user to the originally requested URL. If the originally requested URL contains
text after the domain name, that text is truncated.
Configuring the End-User Acknowledgement Page
You can enable and configure the end-user acknowledgement page in the web interface or
the command line interface. However, when you configure the end-user acknowledgement
page in the web interface, you can include a custom message that appears on each page. You
can include some simple HTML tags in the custom message, such as font color and size.
the command line interface. However, when you configure the end-user acknowledgement
page in the web interface, you can include a custom message that appears on each page. You
can include some simple HTML tags in the custom message, such as font color and size.
In the CLI, use
advancedproxyconfig > authentication
.
To configure the end-user acknowledgement page in the web interface:
1. Navigate to the Security Services > End-User Notification page.
2. Click Edit Settings.