User guide

Proxy Settings
130 Firebox X Edge e-Series
HTTP proxy: Deny message
The Firebox gives a default deny message that replaces the content that is denied. You can replace that deny
message with one that you write. You can customize the deny message with standard HTML. You can also use
Unicode (UTF-8) characters in the deny message. The first line of the deny message is a component of the
HTTP header. You must include an empty line between the first line and the body of the message.
You get a deny message in your web browser from the Firebox when you make a request that the HTTP proxy
does not allow. You also get a deny message when your request is allowed, but the HTTP proxy denies the
response from the remote web server. For example, if a user tries to download an .exe file and you have
blocked that file type, the user sees a deny message in the web browser. If the user tries to download a web
page that has an unknown content type and the proxy policy is configured to block unknown MIME types, the
user sees an error message in the web browser. You can see the default deny message in the Deny Message
field. To change this to a custom message, use these variables:
%(transaction)%
Puts Request or Response to show which side of the transaction caused the packet to be denied.
%(reason)%
Puts the reason the Firebox denied the content.
%(method)%
Puts the request method from the denied request.
%(url-host)%
Puts the server host name from the denied URL. If no host name was included, the IP address of the
server is given.
%(url-path)%
Puts the path component of the denied URL.
Configure the HTTP proxy policy deny message
1. To connect to the System Status page, type https:// in the browser address bar, and the IP address
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > Outgoing.
The Filter Outgoing Traffic page appears.
3. Under Common Proxy Policies, click the Edit button adjacent to the HTTP-Proxy entry.
4. Select the HTTP Settings tab.
5. Type the deny message in the Deny Message text box.
6. Click Submit to save your changes.