IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Is there a way for ISAM to handle 404 errors from backend servers and display ISAM HTML pages instead of 404 error from backend server

  • 1.  Is there a way for ISAM to handle 404 errors from backend servers and display ISAM HTML pages instead of 404 error from backend server

    Posted Fri November 01, 2019 04:33 PM
    Hi Community,  We have a IIS backend server which is displaying IIS specific 404 error pages when particular resource is not found on the server for a logged in session with ISAM. Is there a way to handle this from ISAM where we can read the 404 errors in the logs from the junction backend server and display ISAM HTML pages instead of displaying server pages to the end user. This came up as a vulnerability in the dynamic code scanning. So we wanted to see if we can handle this through ISAM

    ------------------------------
    Akash Bollepalli
    ------------------------------


  • 2.  RE: Is there a way for ISAM to handle 404 errors from backend servers and display ISAM HTML pages instead of 404 error from backend server

    Posted Mon November 04, 2019 09:37 AM
    Edited by Nick Lloyd Mon November 04, 2019 09:37 AM
    Hi Akash,

    This can be done with an HTTP Transformation.  See the sample at https://github.com/IBM-Security/isam-support/blob/master/config-example/webseal/http-transformations/response/response-check-code.xslt.

    Config instructions are at https://www.ibm.com/support/knowledgecenter/en/SSPREK_9.0.7/com.ibm.isam.doc/wrp_config/concept/con_http_transforms.html.

    ------------------------------
    Nick
    ISAM Level II Support
    ------------------------------