Page Redirection

Darjo Lv1Posted 21 Oct 2024 17:52

Hi All,

in NGAF/NSF we configured policy to blocking URL, if http request users can see "Access Denied" page in their browser. but if https request, users cannot see "Access Denied Page" and show time out/cannot reeach out. is it possible if user access https url that blocked still will appear "Access Denied Page" in their browser without do ssl decryption in each users device?if not

By solving this question, you may help 795 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Farina Ahmed Lv5Posted 21 Oct 2024 17:59
  
I think you can customized what ever msg you want to show to the end user. Like in Cisco FTD, we have an option, Interactive Block for which we can use customize msg as well. I am sure this option will also be in NGAF.
Enrico Vanzetto Lv4Posted 21 Oct 2024 19:16
  
Hi, have you already configured ssl decryption in your Sangfor NSF? IF yes, try disable QUIC protocol to force traffic through HTTPS instead of QUIC protocol (that can't be drecrypted).
Rotring Lv2Posted 22 Oct 2024 14:24
  
Hi
In summary, without SSL decryption, it is not possible to show an "Access Denied" page for blocked HTTPS URLs. Users will continue to see timeout or generic errors. If you need a custom block page, SSL decryption is necessary, though it involves administrative and privacy considerations.

I Can Help:

Change

Moderator on This Board

11
6
5

Started Topics

Followers

Follow

1
2
5

Started Topics

Followers

Follow

0
3
4

Started Topics

Followers

Follow

67
20
3

Started Topics

Followers

Follow

3
10
3

Started Topics

Followers

Follow

1
137
3

Started Topics

Followers

Follow

Board Leaders