Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] The 'Blocked URL Message Type' radion button toggles from 'NetPartners WebSense/SurfControl' to 'Juniper Networks' on reboot

0

0

Article ID: KB21982 KB Last Updated: 18 Sep 2012Version: 1.0
Summary:
This article describes the issue of the Blocked URL Message Type radio button toggling from NetPartners WebSense/SurfControl to Juniper Networks on reboot.
Symptoms:
Why does the Blocked URL Message Type radio button display such erratic behavior after reboot?
Cause:
This issue is due to a wrong configuration.
Solution:
The configuration was checked, before and after reboot:

Before reboot:
set url protocol websense
set config enable
set server A.B.C.D 15868 240
set deny-message "This site has been blocked by XYZ in accordance with company policy. Please attempt to access this site from your home computer or contact IT WORKS for assistance."
After reboot:
set url protocol websense
set config enable
set server A.B.C.D 15868 240
set deny-message "This site has been blocked by XYZ in accordance with company policy. Please attempt to access this site from your home computer or contact IT WORKS for assistance."
unset deny-message use-server
The only difference is unset deny-message use-server command, which would re-appear each time a reboot was performed.

So, an attempt was made to set this command via set deny-message use-server; but there was still no change in the behavior and the command would revert to unset deny-message use-server.

The configuration was then checked in the lab firewall; it was found that the set deny-message <string> command, which is present in the configuration, enforces the firewall to use the custom message that is set by the firewall; rather than the message being sent by the Web filtering server.

To resolve this issue, use the unset deny-message “ “ command and then set deny-message use-server.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search