WAF Customization - Manual, template download?

Is there any manual how to use the WAf customization feature?

For the form templates it was possible to download the default template as a reference, afair.

Parents
  • Unfortunately the manual isn't finalized yet, so it is not available as part of the usual online help as of now. It will be available in time for the general availability release.

    Yet we acknowledge that using the WAF customization feature is hard without any documentation of what you could do within the HTML templates. Hence we decided to publish some preliminary documentation of the error page customization here in the community forum. Please read on in the WAF Error Page Customization post.

    Sorry for not answering earlier.

  • Thanks, that's what I was looking for.

    I could reuse my already existing login form template with some adjustments.

    Tested it with failed login, works good.

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
  • Could you explain to me what you did if user has login problems?

    Thank's in advance

    TBC

  • Hallo again,

    is there no one how can help me post a example with error Message if Login failes?

     

    Thank you very much.

    wrbrgds

    TBC

  • Nothing special, I just used a simple html template with the variables stated in the online help:

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "www.w3.org/.../strict.dtd">
    <html>

      <head>
        <link rel="stylesheet" type="text/css" href="<?assets_path?>/mystyle.css">
        <meta http-equiv="content-type" content="text/html; charset=UTF-8">
        <title>me.com - Error</title>
      </head>

      <body>
        <div id="container">

          <div class="info">
            <img src="<?assets_path?>/myuploadedlogo.png" alt="Logo me.com">
            <p class="name">me.com</p>
            <p><i>Your request has been blocked.</i></p>
            <p><b>Reason</b>:<br /><?reason?></p>
            <p><b>Details</b>:<br /><?reason_extra?></p>
          </div>

          <div class="note">
            If you encounter any problems or questions, please contact <a href="mailto:webmaster@me.com">webmaster</a>.<br /><br />
            Request ID: <?uid?>
          </div>

        </div>
      </body>

    </html>

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Reply
  • Nothing special, I just used a simple html template with the variables stated in the online help:

    <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "www.w3.org/.../strict.dtd">
    <html>

      <head>
        <link rel="stylesheet" type="text/css" href="<?assets_path?>/mystyle.css">
        <meta http-equiv="content-type" content="text/html; charset=UTF-8">
        <title>me.com - Error</title>
      </head>

      <body>
        <div id="container">

          <div class="info">
            <img src="<?assets_path?>/myuploadedlogo.png" alt="Logo me.com">
            <p class="name">me.com</p>
            <p><i>Your request has been blocked.</i></p>
            <p><b>Reason</b>:<br /><?reason?></p>
            <p><b>Details</b>:<br /><?reason_extra?></p>
          </div>

          <div class="note">
            If you encounter any problems or questions, please contact <a href="mailto:webmaster@me.com">webmaster</a>.<br /><br />
            Request ID: <?uid?>
          </div>

        </div>
      </body>

    </html>

    ----------
    Sophos user, admin and reseller.
    Private Setup:

    • XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)
    • UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Children
  • Thank you very much Scorpionking,

     

    let me explain what I did:

    Create 1 Real WebServer
    Create 2 virtuelle Server (one with default Theme, one Custom with your Error Site)
    On site-path I have add one with "Form with passthroufh" and one with one template
    On reverse Auth I using my Formula for my one template

    For both test (default Themes, and custom), Login with right credentials are OK but with wrong credentials I get NO Messages, I just came back to the Login Mask.

    Is there somthing what I did wrong?

    Thanks in advanced

    TBC

  • Dear all,

    i have now tested on two UTM's with new Firmware 9.600-5.

    On both UTM it is not possible to display any error Messages if login failed, i only redirect to first login page.

    Pls. is there anyone how can check this.

    Otherwise we need to open a support ticket

    I test that with default sites an templates and with custom sites

     

    Thank's in advanced

    TBC