Configuration of new custom error pages
The configuration of customized error pages is done by uploading a zip file containing all required files to the Submenu – Error Pages.
- The HTML files need to be organized and named in a special form so that Airlock Gateway can use them as error pages.
- If the HTML code of the error pages refers to images, style sheets, or other external files that are added to the archive, the corresponding HTTP links must be relative. All additional files have to be included in the zip file.
- It is possible to configure error pages globally for all virtual hosts or to configure specific error pages for certain virtual hosts:
- Airlock Gateway will prioritize error pages that are specific to the corresponding virtual host.
- If there is no host-specific error page, the version of the global error page is used, if configured. If none is configured, Airlock Gateway uses its generic error page.
Error pages generated by back-end applications may leak internal information about a system's setup and configuration (e.g. platform, system paths, stack traces, or deployed frameworks). Such information is valuable for potential attackers.
To prevent information leakage by default, Airlock Gateway replaces error pages generated by back-ends or ICAP services used in Back-end View.
If you disable error page replacement or configure replacement rules accordingly, the error pages of the back-ends will be displayed instead.