What is a Block Page?
A common feature in a DNS security or web security solution is a block page.
default PDNS block page
If a user attempts to access a blocked resource through a web browser, the security solution redirects the user to a hosted block page. Instead of allowing the web browser to display a "connection failed" message, a block page provides the user information that the resource is blocked. Custom Block PagesDigitalStakeout PDNS supports the creation of multiple custom block pages.
There are four types of block pages in DigitalStakeout PDNS.
- The default block page.
- A custom message in the default DigitalStakeout PDNS block page.
- A fully customized HTML block page.
- Redirect to a URL of your choice.
You can create as many block pages as you require to support the policies you have in your account.Branding Block PagesChanging the Header LogoDigitalStakeout PDNS is built with a multi-tenant model.
Each tenant in DigitalStakeout PDNS is called a Company. In the company's setting, administrators can upload a logo that will be used in the header of the block page. If you select Yes on the Show Company Logo drop down, the custom logo will be shown instead of the DigitalStakeout PDNS logo.
Creating Custom Block Page HTML
DigitalStakeout PDNS supports a simple HTML editor for administrators to create a custom HTML message. With custom HTML as an option, you can create a block page that aligns more with your branding needs and security awareness training requirements.
Applying a Block Page to a Policy
Once you create a custom block page, you can apply the block page to a specific policy. Simply browse to policy you want triggering a custom block page response, and select the custom block page option. Once you apply the block page to the policy, the network, end-points or browsers subject to that policy will immediately receive the custom response.
Block Pages over Secure Connections
If you are only using the DigitalStakeout PDNS client, this step is not required.
Advanced security features including HTTPS traffic inspection and redirection require users to install and trust the DigitalStakeout PDNS root certificate on their machine or device. Please follow instructions in the following article: Install the DigitalStakeout PDNS Root Certificate Authority.
If you are protecting devices behind an IP address without the DigitalStakeout PDNS client, installing the DigitalStakeout PDNS root certificate will prevent a broken HTTPS message at the browser and enable the custom block page to be served over HTTPS.