Fortinet Fortigate-5000 series - Changing the Authentication Login Page

System Config Replacement messages
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102 139
Changing the authentication login page
Users see the authentication login page when they use a VPN or a firewall policy
that requires authentication. You can customize this page in the same way as you
modify other replacement messages, but there are some unique requirements:
• The login page must be an HTML page containing a form with ACTION="/" and
METHOD="POST"
• The form must contain the following hidden controls:
• <INPUT TYPE="hidden" NAME="%%MAGICID%%"
VALUE="%%MAGICVAL%%">
• <INPUT TYPE="hidden" NAME="%%STATEID%%"
VALUE="%%STATEVAL%%">
• <INPUT TYPE="hidden" NAME="%%REDIRID%%"
VALUE="%%PROTURI%%">
%%KEEPALIVEURL%% auth-keepalive-page automatically connects to this URL every
%%TIMEOUT%% seconds to renew the connection policy.
%%NIDSEVENT%% The IPS attack message. %%NIDSEVENT%% is added to alert
email intrusion messages.
%%OVERRIDE%% The link to the FortiGuard Web Filtering override form. This is
visible only if the user belongs to a group that is permitted to
create FortiGuard web filtering overrides.
%%OVRD_FORM%% The FortiGuard web filter block override form. This tag must be
present in the FortiGuard Web Filtering override form and
should not be used in other replacement messages.
%%PROTOCOL%% The protocol (http, ftp, pop3, imap, or smtp) in which a virus
was detected. %%PROTOCOL%% is added to alert email virus
messages.
%%QUARFILENAME%% The name of a file that has been removed from a content
stream and added to the quarantine. This could be a file that
contained a virus or was blocked by antivirus file blocking.
%%QUARFILENAME%% can be used in virus and file block
messages. Quarantining is only available on FortiGate units
with a local disk.
%%QUESTION%% Authentication challenge question on auth-challenge page.
Prompt to enter username and password on auth-login page.
%%SERVICE%% The name of the web filtering service.
%%SOURCE_IP%% The IP address of the request originator who would have
received the blocked file. For email this is the IP address of the
user’s computer that attempted to download the message from
which the file was removed.
%%TIMEOUT%% Configured number of seconds between authentication
keepalive connections. Used on the auth-keepalive page.
%%URL%% The URL of a web page. This can be a web page that is
blocked by web filter content or URL blocking. %%URL%% can
also be used in http virus and file block messages to be the
URL of the web page from which a user attempted to download
a file that is blocked.
%%VIRUS%% The name of a virus that was found in a file by the antivirus
system. %%VIRUS%% can be used in virus messages
Table 28: Replacement message tags (Continued)
Tag Description