FortiGate Administration Guide - FirewallShop.com

System Config
Replacement messages
In addition, replacement messages can include replacement message tags.
When users receive the replacement message, the replacement message tag is
replaced with content relevant to the message. Table 28 lists the replacement
message tags that you can add.
Table 28: Replacement message tags
Tag
%%AUTH_LOGOUT%%
%%AUTH_REDIR_URL%%
%%CATEGORY%%
%%DEST_IP%%
%%EMAIL_FROM%%
%%EMAIL_TO%%
%%FAILED_MESSAGE%%
%%FILE%%
%%FORTIGUARD_WF%%
%%FORTINET%%
%%HC_ACTIVEX%%
%%HC_FC_LINK%%
%%HC_REMEDY_LINK%%
%%HC_URL_LINK%%
%%HTTP_ERR_CODE%%
%%HTTP_ERR_DESC%%
%%KEEPALIVEURL%%
%%NIDSEVENT%%
%%OVERRIDE%%
%%OVRD_FORM%%
%%PROTOCOL%%
Description
The URL that will immediately delete the current policy and
close the session. Used on the auth-keepalive page.
The auth-keepalive page can prompt the user to open a new
window which links to this tag.
The name of the content category of the web site.
The IP address of the request destination from which a virus
was received. For email this is the IP address of the email
server that sent the email containing the virus. For HTTP this is
the IP address of web page that sent the virus.
The email address of the sender of the message from which
the file was removed.
The email address of the intended receiver of the message
from which the file was removed.
The failed to login message displayed on the auth-login-failed
page.
The name of a file that has been removed from a content
stream. This could be a file that contained a virus or was
blocked by antivirus file blocking. %%FILE%% can be used in
virus and file block messages.
The FortiGuard - Web Filtering logo.
The Fortinet logo.
This activex control for the FortiGate-224B Host Check feature.
The link to the downloadable FortiClient Host Security image
on a FortiGate-224B unit.
Link to rerun Host Check on a FortiGate-224B unit.
Link(s) for third-party security software on a FortiGate-224B
unit. These links are defined in Switch > Port Quarantine >
Dynamic Policy.
The HTTP error code. “404” for example.
The HTTP error description.
auth-keepalive-page automatically connects to this URL every
%%TIMEOUT%% seconds to renew the connection policy.
The IPS attack message. %%NIDSEVENT%% is added to alert
email intrusion messages.
The link to the FortiGuard Web Filtering override form. This is
visible only if the user belongs to a group that is permitted to
create FortiGuard web filtering overrides.
The FortiGuard web filter block override form. This tag must be
present in the FortiGuard Web Filtering override form and
should not be used in other replacement messages.
The protocol (http, ftp, pop3, imap, or smtp) in which a virus
was detected. %%PROTOCOL%% is added to alert email virus
messages.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 155