Page Redirection

Darjo Lv1Posted 21 Oct 2024 17:52

Hi All,

in NGAF/NSF we configured policy to blocking URL, if http request users can see "Access Denied" page in their browser. but if https request, users cannot see "Access Denied Page" and show time out/cannot reeach out. is it possible if user access https url that blocked still will appear "Access Denied Page" in their browser without do ssl decryption in each users device?if not

Rotring has solved this question and earned 10 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Hi
In summary, without SSL decryption, it is not possible to show an "Access Denied" page for blocked HTTPS URLs. Users will continue to see timeout or generic errors. If you need a custom block page, SSL decryption is necessary, though it involves administrative and privacy considerations.
Is this answer helpful?
Enrico Vanzetto Lv4Posted 21 Oct 2024 19:16
  
Hi, have you already configured ssl decryption in your Sangfor NSF? IF yes, try disable QUIC protocol to force traffic through HTTPS instead of QUIC protocol (that can't be drecrypted).
Farina Ahmed Lv5Posted 21 Oct 2024 17:59
  
I think you can customized what ever msg you want to show to the end user. Like in Cisco FTD, we have an option, Interactive Block for which we can use customize msg as well. I am sure this option will also be in NGAF.

I Can Help:

Change

Moderator on This Board

11
7
5

Started Topics

Followers

Follow

1
3
5

Started Topics

Followers

Follow

0
4
5

Started Topics

Followers

Follow

67
20
3

Started Topics

Followers

Follow

3
14
3

Started Topics

Followers

Follow

1
137
3

Started Topics

Followers

Follow

Board Leaders