cancel
Showing results for 
Search instead for 
Did you mean: 
tcornelius
Level 7

Helpful Customization - Site Review Request Link from Blocked Page (just cut & paste)

Here is something I did last summer, since the function was not transferred from MWG 6.8 to MWG 7.0. This deals with the blocked pages, where you can actually help the users just click a link to populate an email with all the information that you need to help troubleshoot their issue... yeah crazy, huh.

Here is an example of a customized block page with a site review request built in. When you click the "site review request" at the bottom, it populates an email with all the useful information from the blocked page. Attached is the html in a text file.

One thing we found also in making it easier to understand what group someone was in, we had to rename the block action for each group so that it would be properly displayed on the blocked page. An example would be "HR: block page" or "Standard: block page" so you could see the user was in the HR or standard group to help identify where the trouble was.

Contact me directly if you have any specific questions.

Site Request Review.jpg

Just cut and paste this into your template editor for the blocked page you are working on:

<!-- FileName: URLBlocked.html
     Language: [en]
-->
<!--Title-->
<table class='titleTable' background='$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.system.proxy.enduserurl"/>$/files/default/img/bg_navbar.jpg'>
  <tr>
    <td class='titleData'>
      This website is BLOCKED based on the CATEGORY OF THE WEBSITE
</td>
  </tr>
</table>
<!--/Title-->

<!--Info-->
<table class="infoTable">
  <tr>
    <td class="infoData">
<br />
      <b>URL: </b>$<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.system.url"/>$<br />

        <script type="text/javascript">
          writeToDocument("<b>URL Categories: </b>" + "$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.trustedsource.categorylist.tostring">
  <parameters>
    <entry>
      <string>com.scur.engine.trustedsource.categorylist.tostring.categorylist</string>
      <parameter valueTyp="2">
        <value>
          <propertyInstance useMostRecentConfiguration="true" propertyId="com.scur.engine.trustedsource.url.categories"/>
        </value>
      </parameter>
    </entry>
  </parameters>
</propertyInstance>$" );
        </script><br />
      <b>Reputation: </b>$<propertyInstance useMostRecentConfiguration="true"

propertyId="com.scur.engine.trustedsource.url.reputationstring"/>$<br />
      <b>Block Action: </b>$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.system.rules.currentrulename"/>$<br />
     
<br />
<b>User Name: </b>$<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.auth.username"/>$<br />
<b>User IP: </b>$<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.system.client.ip"/>$<br />
<b>URL Destination IP: </b>$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.system.destination.ip"/>$<br />   
<b>URL Destination Country: </b>$<propertyInstance useMostRecentConfiguration="false" configurationId="14963"

propertyId="com.scur.engine.trustedsource.geolocation"/>$<br />   
</td>

  </tr>
</table>
<!--/Info-->
<br />
<br />
<b>Is this site miscategorized?</b>
<br />If you feel this site is miscategorized or should be unblocked, please contact IT Security Operations and provide a <u>business

justification </u> for allowing access to this site (click link below):
<br />
<br />
<a href="mailto:helpemail@yourdomain.com?Subject=Site Review Request&body=
NOTE - REQUESTS WITHOUT A JUSTIFICATION WILL NOT BE PROCESSSED BY ITSECOPS%0A%0A
Business Justification / User Comments: %0A%0A%0A%0A

URL: $<propertyInstance useMostRecentConfiguration="false" propertyID="com.scur.engine.system.url"/>$ %0D%0A
Block Reason: $<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.system.blockreason"/>$

%0D%0A
Block Action: $<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.system.rules.currentrulename"/>$

%0D%0A
URL Category: $<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.trustedsource.categorylist.tostring">
  <parameters>
    <entry>
      <string>com.scur.engine.trustedsource.categorylist.tostring.categorylist</string>
      <parameter valueTyp="2">
        <value>
          <propertyInstance useMostRecentConfiguration="true" propertyId="com.scur.engine.trustedsource.url.categories"/>
        </value>
      </parameter>
    </entry>
  </parameters>
</propertyInstance>$ %0D%0A
Client IP Address: $<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.system.client.ip"/>$ %0D%0A
User Name: $<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.auth.username"/>$ %0D%0A
URL Reputation: $<propertyInstance useMostRecentConfiguration="true"

propertyId="com.scur.engine.trustedsource.url.reputationstring"/>$ %0D%0A
Time:
$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.datetimefilter.date.monthnumber"/>$/$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.datetimefilter.date.monthdaynumber"/>$/$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.datetimefilter.date.year"/>$  $<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.datetimefilter.time.hour"/>$:$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.datetimefilter.time.minute"/>$:$<propertyInstance useMostRecentConfiguration="false"

propertyId="com.scur.engine.datetimefilter.time.second"/>$ PST %0D%0A
User Group(s): $<propertyInstance useMostRecentConfiguration="false" propertyId="com.scur.engine.auth.attributes"/>$ %0A%0A

%0D%0A
">Site Review Request</a>

Message was edited by: Tom Cornelius on 1/21/11 10:07:06 AM CST
0 Kudos
2 Replies
eelsasser
Level 15

Re: Helpful Customization - Site Review Request Link from Blocked Page (just cut & paste)

Check out this thread:

https://community.mcafee.com/message/166632

It describes setting up a forms-based submission where you don't have to have an email client, but the gateway sends the email itself instead.

0 Kudos
Troja
Level 14

Re: Helpful Customization - Site Review Request Link from Blocked Page (just cut & paste)

Hey,

this is perfect! :-)

Is there any way to configure MWG sending the e-mail itself?

Cheers,

Thorsten

0 Kudos