Configuring Intrusion Prevention Error Page Settings
To configure the error page to use when intrusions are detected, perform the following steps:
Expand the Intrusion Prevention Error Page Settings section.
Step 1
In the Intrusion Prevention Response drop-down list, select the type of error page to be
Step 2
displayed when blocking an intrusion attempt.
To create a custom page, select Custom Intrusion Prevention Page and modify the sample
Step 3
HTML in the text box.
To view the resulting page, click the Preview button.
Step 4
To reset the current customized error page to the default error page, click the Default Blocked
Step 5
Page button and then click OK in the confirmation dialog box.
If you do not want to use a customized error page, select one of the following for the error page:
Step 6
•
•
•
•
When finished, click Accept.
Step 7
Configuring Cross-Site Request Forgery Protection Settings
Cross-Site Request Forgery protection is configured independently for each Application
Offloading portal. When a CSRF attack is detected, log entries are created in both the Web
Application Firewall > Logs and Logs > View pages. For more information about CSRF/XSRF
attacks, see
HTTP Error Code 400 Bad Request
HTTP Error Code 403 Forbidden
HTTP Error Code 404 Not Found
HTTP Error Code 500 Internal Server Error
"How is Cross-Site Request Forgery Prevented?" on page
65.
Web Application Firewall Configuration | 245