topic Setup a "Terms of Use" page for users when browsing internet in General Topics

Setup a "Terms of Use" page for users when browsing internet

Longson_Ho1 — Wed, 18 Jul 2018 09:46:54 GMT

Dear mate,
is it possible to configure checkpoint to show/redirect a "Terms of Use" page to end users at the start of everyday (and timeout 24 hours) when user start browsing internet at office?

I am thinking about UserCheck, but UserCheck is designed to show when access specified web category/ application/ downloading virus.

What I want to do is showing a Terms of Uses Page to end user, require them to click "Agree/ Confirm" before they are access the internet.

Thank you!!

Re: Setup a "Terms of Use" page for users when browsing internet

Maarten_Sjouw — Wed, 18 Jul 2018 10:15:50 GMT

You are thinking in the right direction and no it was not only designed for the Block message.

The Action setting you are looking for is called Ask. Here you can show a specific piece of text (your policy) and then require them to click ok to be able to continue.

Re: Setup a "Terms of Use" page for users when browsing internet

Longson_Ho1 — Wed, 18 Jul 2018 10:33:36 GMT

Hi Maarten,

Thank you for the insight.
To achieve my goal. I am thinking of setup an access control policy layer with 1 rule only matching web browsing with the ask action.

Like this.

I am thinking of configuration like this.
But does it have any "smarter" way?

Re: Setup a "Terms of Use" page for users when browsing internet

Maarten_Sjouw — Wed, 18 Jul 2018 11:36:04 GMT

Personally I would not do it this way, I would use an inline layer where you make sure to set the different rules with the block and allow rules, replacing specific allow rules with the ask action.

That way you can exclude some networks/usergroups from this, it also allows you to prevent internal aaplications to be hit by the rule.

In other words you have more control over when and who will get the policy statement.

Re: Setup a "Terms of Use" page for users when browsing internet

Daniel_Taney — Wed, 18 Jul 2018 11:36:37 GMT

I think this is actually a great way to accomplish this! Its a great use case for policy layers and ensures the TOS rule won't get missed. The only thing I'd ask is whether you truly want this to be an *ANY* / *ANY* rule? You might find some unintended consequences and may want to consider tightening the Source to a group of LANs where your users reside. You might also want to consider making the Destination specific to the Internet. Otherwise, your users could get UserCheck pages while accessing Internal web services. (Unless you want that)

I may actually steal this idea

Re: Setup a "Terms of Use" page for users when browsing internet

Maarten_Sjouw — Wed, 18 Jul 2018 12:59:23 GMT

That is also why I rpoposed to only do it inside the layer, as this way you also get the message before a block page.

Re: Setup a "Terms of Use" page for users when browsing internet

Daniel_Taney — Wed, 18 Jul 2018 15:18:22 GMT

I wasn't thinking of it that way, but I agree!

Re: Setup a "Terms of Use" page for users when browsing internet

Timothy_Hall — Wed, 18 Jul 2018 16:17:23 GMT

If you have the Captive Portal function of Identity Awareness enabled, you can use "unregistered guest access" with a customized page that forces the user to accept Terms of Service and/or enter other voluntary information such as name and contact info as described here:

sk115052: How to allow unregistered guests access to the internet

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com