What is a Block Page?

A block page is a web page displayed to users when they attempt to access a website blocked by DNS filtering policies. It informs the user that the site is restricted and provides options for further action, such as requesting access.

Block Page Behavior on HTTPS Websites

When a blocked website uses HTTPS — particularly sites using HSTS — the block page may not display. Instead, the browser may show a security warning such as "Your connection is not private." This occurs because the browser cannot validate the certificate presented during the redirect and is expected behavior. The domain is still being blocked before the website loads; the difference is how the browser presents the result based on certificate trust and HTTPS enforcement.

To display block pages on HTTPS sites, a trusted Root CA certificate must be installed on the device. See: Installing SSL/TLS Certificates to Display Block Pages on HTTPS Websites

For a full explanation of this behavior, see: Why Block Pages Do Not Appear on Some Websites (HTTPS / HSTS)

Why Configure Block Pages?

1. User Awareness: Block pages inform users why they cannot access certain websites, helping them understand the restrictions in place.
2. Security: They prevent access to potentially harmful or inappropriate content, ensuring a secure browsing environment.
3. Customization: Block pages can be customized to reflect the organization's branding and messaging, providing a consistent user experience.
4. Request Handling: Users can submit requests to unblock sites, which administrators review and approve.

Note: For HTTPS websites, displaying block pages may require installing a trusted Root CA certificate on managed devices. See: Installing SSL/TLS Certificates to Display Block Pages on HTTPS Websites

How Block Pages are Used

1. Default or Custom Pages: Administrators can choose to use a default block page or create a custom one tailored to their needs.
    
2. Form for Requests: Custom block pages can include a form that allows users to request access to blocked sites. This form contains a comment field for the user to explain why the site should be unblocked.
    
3. Notifications: When a user submits a request, the administrator receives a notification and can review the request in the 'Domain Reviews' section.
    
4. Approval Process: Administrators can approve or delete requests based on their review. Approved sites are added to the Override Domain list for the Company from which the request is made.

Setting Up and Customizing Block Pages

Block Page Messaging Considerations

• Access is being blocked before the site loads
• Browser warnings may appear for certain HTTPS sites
• This behavior is expected

Configure a block page

1. Navigate to Block Page Section: Go to the 'Block Page' section.
    

2. Choose Block Page Type: Decide whether to use the default block page, clone and modify an existing block page, or create a custom one by clicking on the 'Create +' button.
    
3. Customize Block Page: If you are creating a new block page, add a meaningful template name, then enter your text in the content box with the desired text and appearance to suit your needs. 
   
   Upload your custom logo to add to the block page and use {{logo}} token to place it on the page. The maximum size of the logo is 1 MB.
   
   Use the {{allowreq-form}} token if you want a user to be able to submit a domain allow request. If you are still dating the form, check the draft box to prevent the unfinished page from being used. 
   
   If you cloned another block page template, it will rename the page with a "(copy)" label to the original name. Locate the cloned page and click on the edit button.
   
   When you add the Optional Form Field: Add a form field for users to submit requests to unblock a site. The form is not customizable. You add the {{allowreq-form}} token on the page where you want the form to appear. This form will include a comment field for the user to explain why the site should be unblocked. Requests to unblock websites will appear as "Domain Reviews" in the portal and will consist of the Company, Location, or Roaming Device Name, the Domain name, and a comment from the user requesting the review.

4. Save Block Page: Click 'Save' to finalize the block page settings.