Setting up a Block Page, a Block Page Bypass User and a Block Page Bypass Code

Setting up your Block Page and your Block Page Bypass

An important step when configuring policies is to ensure that you're giving the right information to your users if they are blocked under Security or Content categories. As the Umbrella administrator, you may wish to exempt users from being blocked during certain times and you can set up the rights to do that as well.

Some helpful terms to know:

• Block Page—The page that's displayed in the browser when a user of your Umbrella service tries to go to a website that's been blocked under the category defined by the Policy for the Identity that user falls under. 
• Block Page Bypass—The method by which certain users who have been given special authority can bypass a normal Block Page. There are two ways you can bypass a block page:  having a user account (a bypass user) or having a special code (a bypass code).  
• Block Page Bypass User—A special user account that gives the rights to certain individuals (or a group of individuals) to go to blocked sites while still being part of the enforcement given to the larger policy group they belong to. 
• Block Page Bypass Code—A code that can be given to certain individuals or groups of individuals to allow them to go to some or all blocked websites until such time as the code expires. 

Not all categories can be bypassed. If a user is blocked for a Security or Malware Category, the site is considered malicious and should not be accessed under any circumstances. If you think a domain shouldn't be blocked, please email us at security-block@opendns.com. 

If you'd like to know more about a block or have us review it in more detail, open a case by emailing umbrella-support@cisco.com with information about the domain and our support and  security teams will review. 

The following Policy Settings can be bypassed:

• Content category blocks
• Destination list blocks (these are domain lists you've created)
• The phishing security block

Getting Started with Block Page Appearance Settings

1. Navigate to Policies > Block Page Appearance and click the + (Add) icon.
   
   
   
   

2. Give your block page a meaningful name and then select how to treat block pages: The Same or Differently.

   If you select Differently, you can select contextual block pages for different types of blocking: Blocked by Category Setting, Blocked by Destination List Setting, Blocked by Phishing Setting or Blocked by Security Setting.
   
   Optionally select for display a default message, select a custom message, or redirect users to a URL.

3. Click Preview Block Page at any time to see what your Block page will look like.

4. You can optionally check Allow blocked users to contact an admin from the block page and add a graphics file to display as a custom logo on the block page.

   This brands the block page, making it clear where the block is coming from.

Using a Block Page Redirect Instead of a Block Page

As an alternative to having a static block page, you can redirect users to another page such as the website for your Organization's Acceptable Use Policy. 

If you redirect users to a different URL, you do not need to include http://. However, if you wish to send them to an encrypted web page, you should include https:// before the URL.

Setting up a Block Page Bypass User

A "Block Page Bypass" user is special username and password that can be given to one or more users in order to provide them the rights to bypass pages that are typically blocked through policy. This user can be thought of as being a special set of rights that are given to individuals as required. The Block Page Bypass user has no ability to log into the dashboard or do any administrative functions other than bypass blocked sites.  

1. Navigate to Policies > Block Page Settings > Bypass Users. Alternately, the block page bypass user can be created by editing the Block Page Appearance in the summary for your Default Policy or any other policy. The edit for this setting is in the lower right corner of the policy summary.
   
   
   
   

2. From the Bypass User drop-down list, choose a <user>.
   When a block page shows up, the user then enters their credentials and bypasses it.

3. Select how the user can bypass a block page.
4. Click Save.
   
   The "Block Page Bypass" user gives the rights to certain individual people, or a group of people to go to blocked sites while still being part of the enforcement given to the larger policy group they belong to.  
   
   

To setup a brand new bypass user, that is, a user account that can be used to authenticate against the block page and continue browsing, first, create the user with the Block Page Bypass role.

1. Navigate to Settings > Accounts and click the + (Add) icon.
2. When creating an account, choose BPB User from the drop-down list.  
   
   
   
   
3. Once you click Create, you'll be given a chance to Configure the Block Page Bypass settings for that account.
   
   
   
   
4. Click Yes and that will take you back to the Bypass Users settings.
   Alternately, if you click No Thanks, you can change the settings for the user you've created under Block Page Settings > Bypass Users or add the settings as part of the policy summary as described earlier.

Creating a Block Page Bypass Code

A Block Page Bypass Code is a code that can be given to users through e-mail, instant messenger or the phone to allow an instant bypass of a particular blocked page. 

1. Navigate to Policies > Block Page Settings > Bypass Codes or from the Summary page of a policy click Edit for the Block page applied.
   
   
2. Set the code to either allow access to all sites or a subset of the content category or destination lists you've defined.  
3. The code can be set to expire at a day in the future and at an hour of that date. 
4. Click Save.

 

WARNING!

If a Policy does not have a Block Page User or a Block Page Code applied to it, the Block Page Redirect will be disabled and the standard block page will appear. Codes and Users will not work unless they are first enabled.

  

Removing a Bypass Code

1. Navigate to Policies > Block Page Settings > Bypass Codes.
2. Expand the code you want to delete and simply hit delete and accept the warning:
   
   

Interacting with a Block Page As a User

As an administrator, you can preview the block page; however, not all elements of the page will be accurately reflected in Preview Mode. This is a problem that's being worked on and will change in the future.

As a standard (non-bypass) user, if you were to go to a website blocked under your Umbrella Policy, you would see a standard block page like this. This example has a custom block page message that includes a link to an acceptable use policy from this organization, as well as a custom logo for this organization.  

At the bottom of the block page, there are two hyperlinks that may appear:

• Contact your network administrator—E-mail the administrator's email f you had optionally provided it in the Settings
• Admin—This allows a user with a bypass user or a code to access the part of the page that asks for that information. Below is the same block page for a Policy that has both a User and a Code configured for it.