KB Article | Forcepoint Support
Support
  1. Home
  2. Knowledgebase

Customizing the DLP Protector ICAP Block Page

  • Article Number: 000008445
  • Products: Data Security, Forcepoint DLP, TRITON AP-DATA
  • Version: 8.7, 8.6, 8.5, 8.4, 8.3, 8.2, 8.1, 8.0, 7.8, 7.7
  • Last Published Date: June 15, 2020

Notes & Warnings

A copy of the original icap-pa_block.markup file is attached for reference.

Problem Description

The block page a user receives when HTTP or HTTPS access to a site is blocked by the Protector's ICAP channel needs to be customized so it is not default.

Resolution

The block page is small and simple by design to ensure that the block page can be transferred in a single packet.  A redirect block page should be used if planning to incorporating company logos or other images in the block page, or to include a large amount of text.

To edit the default ICAP block page:
  1. In Linux, log in with admin or root credentials.
  2. cp /opt/websense/neti/conf/spicer/icap-pa_block.markup /opt/websense/neti/conf/spicer/icap-pa_block.markup.original
  3. Use vi or another linux text editor on /opt/websense/neti/conf/spicer/icap-pa_block.markup
Note Any changes made need to comply with HTML standards.
  1. Save the changes made.
  2. Restart the Pama service with service pama restart
If there are multiple Protector servers, each server has its own copy of the icap-pa_block.markup file that will need to be edited to change the block page message.



Keywords: DLP Data Protector; ICAP Server; DLP Custom Configuration; DLP Block Page; Web Traffic Blocking; Web HTML; Web Traffic Monitoring

Article Feedback



Thank you for the feedback and comments.

Want 24/7 Tech Support?

Learn more