How to customize IAG Application Firewall error pages Created by Idan on 9/29/2010 2:08:26 PM Before you begin
Intelligent Application Gateway 2007 (IAG) is not a regular SSL VPN product, IAG includes Application Firewall functionalities that protects internal published web applications through a built-in portal, protects the portal itself and also protect public web sites from Application attacks
In a read world scenarios we want to change the default pages of the product so malicious entities that will try to attack the portal will not identify the product that defend it. Important thing to say is that if malicious entities will really want to identify the product they will manage to do it
The default error pages looks like this:

Prerequisites
To analyze web pages and find specific lines in CSS / HTML pages according to the page design I recommend you to download and use FireBug for Firefox https://addons.mozilla.org/en-US/firefox/addon/1843
Important to know!
- You will need basic knowledge in CSS (Cascading Style Sheets) and HTML to custom this pages
- You can download the custom code
This is the final custom output of the application firewall error pages:

Configuration Procedures
Phase 1: Copy and Paste the sample files to the CustomUpdate directories
Copy the following files "bottomText.inc", "customDefault.inc", "logo.inc" from c:\Whale-Com\e-Gap\von\InternalSite\samples (see the print screen below

Paste the following files "bottomText.inc", "customDefault.inc", "logo.inc" from c:\Whale-Com\e-Gap\von\InternalSite\inc\CustomUpdate (see the print screen below)
Change the files names based on the following syntax:
+ <0 or 1 (0 for HTTP trunk and 1 for HTTPS) > + <"FileName.inc">
For example if your portal name is "portal" and its HTTPS portal, the file name should be "portal0FileName.inc" (see the print screen below)

Copy the following file "template.css" from c:\Whale-Com\e-Gap\von\InternalSite\css (see the print screen below)

Paste the file "template.css" to c:\Whale-Com\e-Gap\von\InternalSite\css\CustomUpdate (see the print screen below)
Change the file name based on the following syntax:
+ <0 or 1 (0 for HTTP trunk and 1 for HTTPS) > + <"FileName.inc">
For example if your portal name is "portal" and its HTTPS portal, the file name should be "portal0FileName.inc" (see the print screen below)

Copy your custom LOGO file to c:\Whale-Com\e-Gap\von\InternalSite\Images\CustomUpdate (see the print screen below

The following code describe the original file: "bottomText.inc"
<%'include file for bottom text%> Â Â Â Â Â Â Â ÂÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â <%=GetString(4, "This site is intended only for authorized users.")%>
                    <%=GetString(5, "If you encounter any problems with this site please contact your system administrator at")%> <%=administratorMailAddress%>                 |                    Â
    |        Â
|
- The following code describe the original file: "customDefault.inc"
- The following code describe the original file: "logo.inc"
Phase 2: Customize the files in the CustomUpdate directorie
The following code describe the Customize file: portal0bottomText.inc
In the following file I changed only the marked string
<%'include file for bottom text%>
The following code describe the Customize file: portal0customDefault.inc
In the following file I changed only the marked string
The following code describe the Customize file: portal0logo.inc
This code responsible for following section (and more)

The following code describe the Customize file: portal0template.css
The blueBorder responsible for the default blue line in the default error page (which I removed)
You can see that I change it to white = #000000

To find the specific line in the CSS / HTML file you can use Firebug (see the print screen below

Phase 3: Replace the strings on the pages
If you want to remove / replace all the strings that are related to Whale Communication / Intelligent Application Gateway etc ... you will need to copy the file "sample_default.xml" from c:\Whale-Com\e-Gap\von\InternalSite\Languages (see the print screen below)

- Paste the file to c:\Whale-Com\e-Gap\von\InternalSite\Languages\CustomUpdate (see the print screen below)
Change the file name from "sample_default.xml" to "Default.xml"

- Search and Replace the strings in the file c:\Whale-Com\e-Gap\von\InternalSite\Languages\CustomUpdate\Default.xml
Activate the IAG settings
This is the final and custom web application firewall web page according to this article

If you have any issues with the following configurations please go to our Technical Forums in the following link: http://Forums.ForefrontSecurity.ORG
