Variables for User Response elements and how they work

Variables allow you to dynamically add details about the connection to the message that is shown to users. Users can provide the information to their administrator when they report problems with the connection.

You can add variables to the Message Response and Custom HTML response types. If the information that the variables represent is available for the connection, the details are automatically added as text to the message that is shown to users. For example, if the client's IP address is 192.168.22.33, the {{SrcIP}} variable is replaced with 192.168.22.33 in the message. If the information is not available, N/A is shown in the message.

The following variables are supported:

Table 1. Variables for User Response elements
Variable Description
{{SrcIP}} The source IP address of the connection.
{{DstIP}} The destination IP address of the connection.
{{SrcPort}} The source port of the connection.
{{DstPort}} The destination port of the connection.
{{User}} The user name and LDAP domain of the user that made the connection in the format user@domain.

If the LDAP domain is not available, only the user name is shown.

{{Group}} A comma-separated list of User Groups to which the user belongs.
{{Url}} The URL requested in the connection.
{{UrlCategory}} The URL Category for category-based URL filtering that the requested URL matches.
{{Application}} The Network Application identified in the connection.
{{RuleTag}} The rule tag of the rule that blocked the connection.
{{TimeStamp}} The date and time of the connection.
{{FileName}} The name of the file that was detected in the connection.
{{ArchiveName}} The file name of the compressed file that was detected in the connection.
{{MalwareName}} The name of the malware that was detected in the connection.