Cisco Cisco Web Security Appliance S170 ユーザーガイド
250
I R O N P O R T A S Y N C O S 6 . 3 F O R W E B U S E R G U I D E
Note — AsyncOS always includes all parameters in each redirected URL. If no value exists for
a particular parameter, AsyncOS passes a hyphen (-).
a particular parameter, AsyncOS passes a hyphen (-).
When you want the user to view a different page for each reason for a blocked website,
construct a CGI script on the web server that can parse the query string in the redirect URL.
Then the server can perform a second redirect to an appropriate page.
construct a CGI script on the web server that can parse the query string in the redirect URL.
Then the server can perform a second redirect to an appropriate page.
Consider the following rules and guidelines when entering the custom URL:
• You can use any HTTP or HTTPS URL.
• The URL may specify a specific port number.
• The URL may not have any arguments after the question mark.
• The URL must contain a well-formed host name.
For example, if you have the following URL entered in the Redirect to Custom URL field:
http://www.example.com/eun.policy.html
DVS_Verdict
Malware category that the DVS engine assigns to the transaction.
For more information about malware categories, “Malware Scanning Verdict
Values” on page 460.
For more information about malware categories, “Malware Scanning Verdict
Values” on page 460.
DVS_ThreatName
The name of the malware found by the DVS engine.
Reauth_URL
A URL that users can click to authenticate again if the user is blocked from a
website due to a restrictive URL filtering policy. Use this parameter when the
“Enable Re-Authentication Prompt If End User Blocked by URL Category”
global authentication setting is enabled and the user is blocked from a website
due to a blocked URL category.
To use this parameter, make sure the CGI script performs the following steps:
website due to a restrictive URL filtering policy. Use this parameter when the
“Enable Re-Authentication Prompt If End User Blocked by URL Category”
global authentication setting is enabled and the user is blocked from a website
due to a blocked URL category.
To use this parameter, make sure the CGI script performs the following steps:
1. Get the value of
Reauth_Url
parameter.
2. URL-decode the value.
3. Base64 decode the value and get the actual re-authentication URL.
4. Include the decoded URL on the end-user notification page in some way,
either as a link or button, along with instructions for users informing them they
can click the link and enter new authentication credentials that allow greater
access.
For more information, see “Allowing Users to Re-Authenticate” on page 366.
3. Base64 decode the value and get the actual re-authentication URL.
4. Include the decoded URL on the end-user notification page in some way,
either as a link or button, along with instructions for users informing them they
can click the link and enter new authentication credentials that allow greater
access.
For more information, see “Allowing Users to Re-Authenticate” on page 366.
Table 12-4 End-User Notification Parameters for Redirected URLs (Continued)
Parameter Name
Description