Cloudsoc Protect Policies, has a sub feature called "Response Template", One of the features of this template, is the ability to customize the response message to the end user.
When configured, the customized message configured under the "agent" does not take presented on the browser, instead, the browser continues to display the default block/deny message.
here is an example, where the Cloud SWG (WSS) agent shows the custom message while the browser does not:
The "response Template" used is:
When it matches, the custom message shows on the notification message of the Cloud SWG agent , but not on the browser:
This is the expected behavior, where the custom message now is being directed to the WSS Agent custom message instead of the browser.
This is the expected behavior. The custom message gets displayed on the BNS banner of the WSS Agent (More information)