Feature Request : provide a way to create access policies or identities with matching condition based on the HTTP header's "Referer" field

Hello,
I have a use-case I would like to share with you. When a customer configures its WSA with highly restrictive internet access like in the example below, it may trigger some issues :
1- allow internet access only for URLs defined in whitelist.
2- block ALL other requests.
Let's take the following example :
1- the customer only allow requests to www.siteA.com. siteA.com is the only URL included in its whitelist.
2- www.siteA.com contains many embedded objects (such as facebook like tags, youtube videos, links to partners sites, ...)
In this configuration, the end user will be allowed to reach siteA but the page will not be fully displayed. All the embedded objects not directly located on siteA will be missing.
With WSA, the easiest way I can imagine to solve the issue is to list all the embedded objects present on siteA, get back their URL and also add these URLs to the whitelist. But this solution if of course far to be really convenient since it involves to know exactly how each HTTP page you want to consult is built.
With other proxies, such as Bluecoat proxies or McAfee Web Gateway proxies for example, I used to solve this kind of issue by using the HTTP referer field (the URL you come from). For example with Bluecoat :
<Proxy>
    ALLOW request.header.Referer.url.domain=//www.siteA.com/
=> All requested objects from siteA.com will be automatically allowed by the proxy, even if they are not part of my whitelist.
- Do you have a better suggestion than the one I'm currently using with WSA (adding each sites in whitelist) ?
- Would it be possible to add the field HTTP referer as a matching condition for Identities and access policies in your next release ?
Thanks in advance
Best regards

As far as I'm aware this functionality is still not available... would be an awesome feature to have, but could also be abused at the same time by a user writing their own "middleware" proxy and setting the referrer header to that allowed site..  could be done in like ~15 lines of perl / python.
Either way... would still be a cool feature to have.

Similar Messages

  • How to create a linked data source with document libraries based on the same template?

    I use SharePoint Foundation 2013, SP Designer and Visual Studio 2013 to my needs. But there are several things which i don't get.
    I have a number of libraries which use the same template. I want to create a linked data source, that would contain them all, and if I add a library based on this template, the library would be added to the data sorce. Is it possible?
    I tried creating linked data souces, but the view that it brings by default is limited(no sorting, etc.). How can it be modified?

    I am planning to do my project on Linux with J2EE,Oracle technologies.You don't need to set up a DSN. Just use a JDBC connect string such as jdbc:oracle:thin:@localhost:1521:xe
    ~Jer

  • Is there a way to create a drop down menu with an automatic answer dependent on what is chosen?

    Is there a way to create a drop down menu with an automatic answer dependent on what is chosen? An if-then statement perhaps?  I am looking to add over 100 drop down options and would like to have a message automatically pop up depending one which option they chose.  Thank you.

    Hi,
    You would use the skip logic to conditionally show form items based on the selection within the drop-down menu. Here's a link to a description of the feature in our help documentation:
    http://help.adobe.com/en_US/formscentral/using/WSd789abd336388b1642c7fce012da94afe4f-8000. html#WS0faeceb8c23f5d60-774f03e3131ddc76d7d-8000
    Regards,
    Brian

  • HT204053 the only way to creat an icloud account is with a ipad, iphone or imac. is it possible to creat the account from my windos PC? i already downladed i cloud, and i have an Apple ID but Not an Icloud account/

    the only way to creat an icloud account is with a ipad, iphone or imac. is it possible to creat the account from my windos PC? i already downladed i cloud, and i have an Apple ID but Not an Icloud account/

    Isa Garduño wrote:
    the only way to creat an icloud account is with a ipad, iphone or imac Apple computer.
    As you already knew, no, you cannot create a new iCloud account from anything but the above devices.
    http://support.apple.com/kb/HT4436

  • Dw, css, and a template, what is the best way to create a 20 page website with a different header in each page?

    dw, css, and a template, what is the best way to create a 20
    page website with different header content on each page? i am
    trying to insert a specific image and background color for each
    header on every page. what is the easiest or best way to do this?
    thanks, bryan

    "mediastream13" <[email protected]> wrote in
    message
    news:f47bes$9om$[email protected]..
    > ok, murray, here is the site.
    http://www.helphotline.org
    > in I.E. 6 i can't see the background color behind the
    header images,
    I'm seeing a hot pink background (which is my browser default
    - so that I do
    remember to declare a background color). You need to add:
    body { background-color: white;} to your stylesheet, or into
    the imbedded
    styles on your page.
    In Firefox, the very top black section, #headertop is hidden
    behind the
    header image.
    > background of the date/time isn't stretching the full
    length of the
    > screen, and
    > the margins aren't working in the main content area. how
    can i put a
    > background
    > color behind the header images?
    I can see the header image stretching right across the page..
    so not sure
    what color is missing there.
    > is there anyway to download i.e. six on my computer if i
    already have
    > i.e.7? i
    > just want to be able to preview the site before i upload
    the changes. it
    > seems
    > everything works in i.e. 7.
    Yes, I used this and it works really well.
    http://tredosoft.com/Multiple_IE
    Nadia
    Adobe® Community Expert : Dreamweaver
    CSS Templates |Tutorials |SEO Articles
    http://www.DreamweaverResources.com
    ~ Customisation Service Available ~
    http://www.csstemplates.com.au

  • Pages 5.5.1: When opening a document created with Pages '09 (Version 4.0) with Pages 5.5.1 the page header and the page footer are deleted. How can this be prevented? Or is this a bug in Pages 5.5.1?

    Pages 5.5.1: When opening a document created with Pages '09 (Version 4.0) with Pages 5.5.1 the page header and the page footer are deleted. How can this be prevented? Or is this a bug in Pages 5.5.1?

    Same problem here (no graphics in header or footer) and the problem has been reported months ago. It is another bug/feature lost when Apple moves from 09 to the iCloud-compatible versions.  Complain to Apple, you may have better chance than me and they may finally listen to their users....

  • Feature Request or another way of setting an Affiliate up or External Affiliate Software

    One of the biggest problems with the Affiliate module, is its persistence
    Feature Request -
    Using Affiliates to market products and services is a huge business, but the BC system only caters for affiliates providing a link to a specific product (or possible the shop) and it only works if they follow that link and buy right there and then.
    Even if the customers buys something under the affiliate link, if the customer returns to the shop a second time, without using the link, then any affiliate reference is lost. There is no persistence nor any link stored between the affiliate and customer.
    Therefore the affiliate program does not work for any business that may use affiliates but does not use a Shopping cart. For example I am working on a Property site where professionals may refer clients to buy property, and receive a referral/affiliate fee. We need to track which customers are linked to a referrer/affiliate but there is no shop involved, although we would like to put the commission through as a manual order and track commission payments.
    Suggestion: When a Customers uses an affiliate link to enter their details (or buy something from a shop for that matter), then the affiliate is stored permanently on the customer’s record, and can be used for subsequent purchases/orders.
    This means that if the customer returns to the shop directly and buys something, then the system can use the stored affiliate link to make sure the affiliate gets paid.
    Secondly other business can now add an Order Manually for the client, and the affiliate will get paid. This will open up BC to other businesses that use affiliate systems without a shopping cart. Especially useful for the Services industry.
    I also think by doing this BC can remove the problem of requiring a seamless gateway.
    Another Way?
    Any feature request like this may take time to be set up, if it is set up at all.
    Can anyone advise if they have managed to get around the problem and how. Thanks
    External Affiliate Software -
    Has anyone used an external affiliate software program, and integrated it with BC and if so, which one and was it any good?
    Thank you

    That is correct: SLBL only works on SMTP addresses.
    If I understand correctly, the user wants to prune thier Block List by removing addresses that are not actively sending spam.  This is not easy, but it is something that the user can do themselves:
    The user can log directly into the Spam Quarantine to see what mail has been stopped on thier behalf recently.  They would then access their SLBL through the Spam Quarntine to see what addresses they have configured for Blocking.  For each address listed, they would Search their Spam Quarntine for emails from that address.  They would then review the content of those emails to determine if they stilll want to block the specific address or not.
    I hope this helps!
    - Jackie

  • Is there a way to create a log-in button with a password protected section of a site?

    I have a client that needs a log-in section and a way to create a customer account. Is there a widget or workaround that allows me to create a log-in button and create a customer account where they specify a username and password? Muse is terrific for simple sites, but without having access to the code, I can't operate the way I used to. When I'd need custom work done like this, I'd hire a programmer to create the code, then simply paste it into the code of the site. I can't do this with Muse and it's a huge barrier. Anyone have any ideas or solutions? Please call me directly if you have a solution: 727-466-6888 (Florida).

    You can fairly easy do it with Business Catalyst hosting's webMarketing plan. With a little Business Catalyst knowledge it can be achieved quite easily.
    Other than that you would need to create your login forms and secure pages outside of your site and then add the login form and secure content to the site with iFrames. A more tedious and not ideal way of doing it.

  • What is the best way to create additional storage AND backup a laptop, as well as the storage?

    Beyond being seriously annoyed at an Apple Employee recommended we go the NAS route at an Apple Store no less—only to find it doesn't work for storage OR Time Machine backups of iPhoto (after spending weeks organizing/transferring date, outside of a good deal of coin)—we are now perplexed as how to set up/store based on our needs.
    Goals
    Create additional storage (iPhoto, iTunes, documents) for the family laptop
    Accessible by anyone/device on the home network (iPad, mini iPad, iPhones, etc..)
    Would prefer the ability to access this offsite as well
    Backup of the laptop
    Backup of the storage HD
    Ensure we do not lose iPhoto libraries data/files
    Here is what I am thinking—need to know if it will work.
    Purchase two HDs
    Plug them into my base station
    Allocate one HD @2T for storage (additional iPhoto libraries, home movies, iTunes libraries, etc...)
    Partition the second HD @3T to handle two Time Machine backups
    (a) Time Machine of the laptop (up to 1T of backups)
    (b) Time Machine of the first HD (up to 2T of backups) - Is this possible?
    What I need to know is
    Is it possible to partition a HD to Time Machine two backups from different sources—one being a HD?
    If this is not a good solution—what is? I am pulling my hair out trying to figure out how to deal with a lot of data related to iPhoto due to the formatting limitations there.

    While most do not advocate mixing Time Machine backups with other files, I have 3 Time Capsules with files and backups on the same partition and have never had a problem despite doing it for many years. All 3 Time Capsule are set up as NAS devices.
    One Time Capsule holds the Snow Leopard partition backup of two computers. The other two each have a backup of the Mountain Lion partition of two computers. Time Machine is set up to alternate between the devices, which it can now do. On these 2 Time Capsules is a copy of the iTunes Library and a copy of the iPhotos Library, which provides a backup for the two. Every so often I manually copy the new files from the primary iTunes/iPhotos library to the backup on the other Time Capsule.
    If the computer is on, I can access the computer from my iPad and then access the hard drives and the files.
    Hopefully, I have been able to make this clear.

  • Is there a way to create a CSS image gallery with caption?

    Hi everyone,
    Ive been using the disjoint rollover, but I only have one
    thing that I want to add to it—a caption right underneath an
    image.
    Besides using that Project Seven plug-in, is there a way to
    create an image gallery without using layers? Or is layers the only
    way to do it? All I want (words of doom, huh?) is a thumbnail to be
    able to switch and image and add a caption to it. Can anyone point
    me in the right direction? Or is that Project Seven plug-in deal my
    best bet? What about Set Text of Layer in DW.
    Oh yeah, Im still using DW with CSS sprinkled in..any help?
    Thanks in advance.
    -C

    > Besides using that Project Seven plug-in, is there a way
    to create an
    > image
    > gallery without using layers?
    Of course.
    > What about Set Text of Layer in DW.
    That would do it, and it's not necessary that the layer stay
    a layer after
    you have done it, either. I do this frequently - make a
    layer, apply the
    behavior, and then remove the position:absolute from the div,
    and place it
    where I want it.
    See the demo here -
    http://dreamweaverresources.com/tutorials/settextoflayer.htm
    Murray --- ICQ 71997575
    Adobe Community Expert
    (If you *MUST* email me, don't LAUGH when you do so!)
    ==================
    http://www.dreamweavermx-templates.com
    - Template Triage!
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    http://www.macromedia.com/support/search/
    - Macromedia (MM) Technotes
    ==================
    "psypent81" <[email protected]> wrote in
    message
    news:eus555$lac$[email protected]..
    > Hi everyone,
    >
    > Ive been using the disjoint rollover, but I only have
    one thing that I
    > want to
    > add to it?a caption right underneath an image.
    > Besides using that Project Seven plug-in, is there a way
    to create an
    > image
    > gallery without using layers? Or is layers the only way
    to do it? All I
    > want
    > (words of doom, huh?) is a thumbnail to be able to
    switch and image and
    > add a
    > caption to it. Can anyone point me in the right
    direction? Or is that
    > Project
    > Seven plug-in deal my best bet? What about Set Text of
    Layer in DW.
    >
    > Oh yeah, Im still using DW with CSS sprinkled in..any
    help?
    >
    > Thanks in advance.
    >
    > -C
    >

  • Is there a way to create hyplinks in documents automatically with firefox, as you can with IE?

    Is there a way to create hyperlinks "automatically with Firefox, as you can with IE (with, for example, Ctrl + K, then go to the website, then back to the document, and it automatically populates the url)?

    If you create the folders as a child within the main pictures folder, then they will show up in the app separately. I have many folders with pictures in.
    You will need to move the photos manually - they will automatically go in the Camera folder.
    Hope that helps.
    Love Me - Love My BlackBerry
    Z10 OS Version: 10.0.10.690
    Z10 Software Release: 10.10.90
    PlayBook - 2.1.0.1526

  • Is there an easy way to create 2 page imposed PDFs with a background?

    I have figured out a way to create a suitable imposed single page PDF using the 'import as layer' action, the action only understands a single paged background PDF.
    In other words, I have a PDF that has the suitable marks on it with the pages marked 'Page 1' & 'Page 2'. This is the background PDF.
    I open this PDF in Acrobat and run the action that places another PDF (the 'Source' PDF) on multiple layers with different offsets.
    The original (template) PDF is 2 pages & the Source PDF for imposition is 2 pages, and even though the 'import as layer' understands that the source PDF being imposed is 2 pages, it does not seem to allow the original (template) PDF to be seen as 2 pages.
    There is a 'Target page number' option in the Preview area, but that is grayed out at 1.
    So...other than commercial applications, is there an easy way to build a 2 page PDF imposition file??
    Maybe a script?

    Sabian,
    Yes, the Quite software would be perfect, especially the 'Hot'. Tested & works great for us, but the price tag for the 'Hot' is rather steep for our relatively simple process......background template with a 'step & repeat' of the 'live' document.
    As I mentioned in the original post, to do this with a single page PDF is simple enough using an action that places the 'live' doc multiple times, but the vast majority of our publications are 2 pages.
    Currently runing the action twice for each job. I would save a bit of time if this could be automated to do both sides with one action, or one script.

  • I want to create an external video widget with iAd. I followed the steps and copied the Url and paste it in the Video pop-up menu in the Properties section of the inspector. When i select 'preview' the video doesn't play and the Url that i pasted is gone.

    i want to create an external video widget with iAd to use in an iBook. I followed the steps and copied the Url and paste it in the Video pop-up menu in the Properties section of the inspector. When i select 'preview' the video doesn't play and the Url that i pasted is gone.
    hope someone can help!

    May have something to do with whether or not the URL can be reached while building your widget.  I've got a video on the web. When I enter the URL into the field for the video object and click to another field,  the URL is replaced with some text indicating that it is accessing the video then updates itself to displaying just the name of the video file.
    It shows just fine in preview and I can see the full path to the video when I export the widget so it should work for you. 
    Is the video accessible from your Mac while you're laying out your widget?
    -Mark

  • Is there a way to fill a cell with a value based on the selection from another cell?

    For example: If have a drop down menu created for Cell A1 with options (Dog 1, Cat 2, Bird 3). Is there a way to fill cell A2 automatically when I select from the drop down menu.
    So if I selected 'Cat' in A1, cell A2 would automatically input the 2.

    I suggest an extensible method that allows you to add other animals:
    This method adds a small table called "Animal Lookup" that matches names (same as in the pop-up menu) with a value.
    The table on the left uses this table to retrieve the value based on the animal:
    B2=VLOOKUP(A2, Animal Lookup :: A:B, 2, 0)
    select B2 and fill down

  • I`m trying to develop an optimistic concurency based on the Etag Header. This header is being sent OK on every GET request, but NOT being sent on a POST. Why?

    I`m trying to implement an optimistic concurrency control over a web application entities.
    I`m attaching an Etag HTTP Header to every URI that represents an entity.
    On successive GET requests this header is being sent back as If-None-Match (witch is OK)
    The PROBLEM is on a POST request, the ETAG is not being sent back (neither If-None-Match, If-Match, etc..).
    My question is : Is this the desired behavior? The browser omits this on purpose on a Http POST?

    Hi Daniel,
    Do you still have this problem ?
    (If you found a solution a link to that may help others)

Maybe you are looking for

  • Who creates the Photo Box album in iPhoto iOS 7.1?

    I just noticed an album in iPhoto iOS 7.1 that is titled "Photo Box."  How is it created?

  • Using IMAP with Gmail

    Do I need to set this up using the 'Gmail' option, or the 'Other' option, as I read somewhere that the 'Gmail' option sets up a POP account, not an IMAP acccount. Cheers

  • Smart Album works with Desktop, not Screen Saver?

    I've created a Smart Album in iPhoto, with my 5-star photos in it, calling it "My Favorites". In iPhoto, there are 116 photos right now. When I go to my Desktop settings, I see all the photos in "My Favorites". When I go to Screen Saver, I get 5 of t

  • 10.4.6 update actually CAUSES my MBP to have the airport issue!

    My MBP didn't have any issues with automatically connecting to preferred networks... After doing the 10.4.6 update, it now won't automatically join airport networks! Anyone else have this backwards behavior?

  • Replacing the HDD and installing leopard (PLEASE HELP)!!!

    hi there, i currently have a macbook that has just gone out of warranty. i bought a new HDD from WD, installed tiger (using the original discs that come with the mac) and then installed leopard. it seemed to be working fine (apart from a few keyboard