Feature Overview
Secure Access includes the ability to present the user with a Warn notification page which alerts users when they attempt to access a site that violates organizational policies. User must acknowledge the warning before proceeding. To enhance this functionality, the new Warn Page Input Field feature introduces an additional "type-to-continue" option alongside the existing "click-to-continue" experience. With this feature, users are required to type the word “continue” into a designated input field before the Continue button becomes active and clickable. The purpose of the input field is to create a deliberate pause, allowing users more time to reflect on the warning message before proceeding. This added step reinforces the importance of the notification and encourages thoughtful decision-making.
Key Benefits
Younger and less regulated companies are taking a different approach when it comes to end-user behavior. Rather than controlling what end-users do, there is a shift to helping end-users make better decisions through coaching or informing. This concept borrows from the philosophy known as “guardrails, not gates”. These younger and less regulated companies seek a culture of trusting their employees and empowering them to perform their jobs using their own cunning and creativity, and not present barriers that could be business impacting.
Use Cases
For example, an organization, ACME, has approved the use of cloud storage for file transfers and collaboration with 3rd parties but prefers to use their own Box tenant, acme.box.com. However, ACME management recognizes its customers, contractors, and auditors may have requirements that ACME employees instead use their own cloud storage tenants. In such cases, ACME IT has identified cloud storage services that are acceptable for business use but still want to steer ACME employees to use their own Box tenant whenever possible and discourage use of personal cloud storage accounts. A coaching notification page is designed to provide this message to ACME employees when accessing a cloud storage service other than their own Box tenant. ACME employees unfamiliar with this policy are more likely to read and consider the Warn notification page because of the type-to-continue requirement rather than clicking Continue to hurry on and bypass the notification page.
The fact that an ACME employee has had to type “continue” to navigate beyond the notification page serves as an acknowledgement of the notification page and this action is logged for historical reference.
Getting Started
- Secure Access Admin navigates to Global Settings under Secure > Access Policy > Rule Defaults and Global Settings and enables “Display user input field in warning messages”. Note: this change affects all Warn notification pages.
- Create a new Notification Page by navigating to Security > Notification Pages and click Add. Under Warn Page Appearance select “Show a warn page with a customer message” and supply the message end-users will see.
- Attach the Notification Page to a Security Profile, existing or new, that will be used in rules with the Warn action that should display the desired message.
Documentation and Resources