Datacentre Support Reference Guides

 
  
Specifying a user defined category to splash anti-phishing warning on to selected websites. 
  
The anti-phishing policy defined in Blue Coat's tech brief "Blocking Phishing Scams" is fine, however the anti-phishing message is splashed up onto every webpage which uses forms. When I implemented a policy on our test appliance, I immediately started getting phone calls from test users saying "please switch off this annoying message"! So a quick phone call to our Blue Coat Techies and the problem was resolved. There is a slight administrative overhead for this process as base URLs need to be input into a category list but it's well worth the effort.

Here's what you need to do.

1. Open the VPM (Visual Policy Manager)

2. Navigate to "Configuration" -- "Edit Categories"

3. Expand "Policy" and click on "Add"

4. Enter the name "myphishingsites" and select "OK"

5. Now click on "Edit URLs" and enter you list of URLs that you want to see appear with the anti-phishing message. Click here to see the researched list.

6. Install the Policy and close the VPM

7. Navigate to "Policy Files" -- "Install Local File From" and select the text editor from the drop down list

8. Add the following at the top of your policy:

define javascript jDisplayDest
onload <<EOF
if (document.forms.length > 0) {
var p = document.createElement("p");
p.innerHTML =
'<table border=2 bgcolor="#0000B0"><tr><td><font size=2>'+
'<font color=#FFFFFF><center><b>Phishing Alert:</b> This website is, or has been being known to be targetted by fraudulent email activities known as a Phishing Scam. <b>The website you are actually visiting is </font> '+
'<font color=#FFFF40>'+document.location.hostname+'</b></font>'+
'<font color=#FFFFFF></b> If you see an IP address and NOT the websites URL then you should <b>NOT</b> proceed.</center>'+
'</font></table>';
document.body.insertBefore(p, document.body.firstChild);
}
EOF
end

define action aDisplayDest
transform jDisplayDest
end


<proxy> category=myphishingsites
action.aDisplayDest(yes)

9. Now install your Policy.

10. To test what you've done, navigate to http://www.lloydstsb.co.uk or whatever site is in the list you entered and you should see your anti-phishing message splashed across the top of the webpage.