• SonicOS 7 Action Objects
• App Rule Actions
  • About Action Objects
    • About System Predefined Default Action Objects
    • About Action Types for Custom Action Objects
  • About Actions Using Bandwidth Management
    • Bandwidth Management Methods
  • Creating an Action Object
  • Modifying an Action Object
  • Related Tasks for Actions Using Packet Monitoring
• Content Filter Actions
  • About Content Filter Objects
  • About CFS Action Objects
  • About the Passphrase Feature
  • About the Confirm Feature
  • About UUIDs for CFS Objects
  • Managing CFS Action Objects
    • About the CFS Action Objects Table
    • Configuring CFS Action Objects
      • Block Option
      • Passphrase Option
      • Confirm Option
      • BWM Option
      • Threat API Option
    • Editing CFS Action Objects
    • Deleting CFS Action Objects
    • Applying Content Filter Objects
• SonicWall Support
  • About This Document

About the Passphrase Feature

The Passphrase feature, in conjunction with the Confirm feature, restricts web access based on a passphrase or password. You can configure the passphrase operation for special URI categories or domains in the Forbidden URI List. To access the forbidden URIs, users are asked to enter the correct password or else web access is blocked.

Passphrase only works for HTTP requests. HTTPS requests cannot be redirected to a Passphrase page.

For information about the Confirm feature, see About the Confirm Feature.

How the Passphrase operation works:

1. The user attempts to access a restricted website.
2. A Passphrase page displays on the user’s browser.
3. The user must enter the passphrase or password and then submit it.

4. CFS validates the submitted passphrase/password with the website’s password:

   • If the passphrase/password matches, web access is allowed. No further confirmations are needed, and users can continue to access websites of the same category for the Active Time period set for the Confirm feature. The default is 60 minutes.

   • If the passphrase/password does not match, access is blocked, and a Block page is sent to the user.

     Users have three chances to enter the passphrase/password. The site is blocked if all chances fail.

   If the user selects Cancel, the site is blocked immediately.