Forum Discussion

Effrum's avatar
Effrum
Icon for Nimbostratus rankNimbostratus
Jan 23, 2019

Modifying the default block response page

We have ASM policies across several applications in our environment. One of the things we'd like to do is add some additional information to the blocking response page in order to give users more information (basically a help desk number) if they feel they've received a message in error.

 

We'd really like to be able to add this information to 1 place and have it affect all policies, not have to modify the response page of every ASM policy. Is there a way to do this? Maybe by modifying the default page?

 

ASM Advanced WAF
security
  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Jan 23, 2019

    You can't modify the default policy. You could script the modification of the custom response in all policies using tmsh and just run the script once to loop through all policies and change them. Also if you have BIG-IQ managing ASM it can be done centrally from BIG-IQ

     

  • leonline_225556's avatar
    leonline_225556
    Icon for Altostratus rankAltostratus
    Jan 25, 2019

    Hi Effrum,

     

    An other option would be to choose the Redirect URL option for all ASM policies to redirect the user to an external website, e.g. ;

     

    With this option you have 1 central place where you manage the block page. Based on the Referer header you know from what webpage the user is coming and can decide to show additional or different content.

     

    Leon