Integrate with a Third-Party Remote Browser Isolation Provider
Focus
Focus
Advanced URL Filtering

Integrate with a Third-Party Remote Browser Isolation Provider

Table of Contents

Integrate with a Third-Party Remote Browser Isolation Provider

Redirect users from unknown or risky sites to an isolated environment hosted by a Remote Browser Isolation provider.
Where can I use this?
What do I need?
  • Prisma Access (Cloud Management)
Note:
Prisma Access
usually include
Advanced URL Filtering
capabilities.
While it’s the most secure action, blocking unknown and risky sites can disrupt your users’ experience and productivity. Remote Browser Isolation (RBI) redirects users from unknown or risky sites to an isolated environment hosted by an RBI provider. The website is rendered for the user and they can view the resources they need, without directly accessing the unknown or risky site from their endpoint.
Prisma Access
easily integrates with RBI providers for this type of browser redirection. In just a step or two, you can choose the RBI provider to integrate with, and then choose the URL categories that you want to direct to the RBI provider’s hosted environment.
In addition to third-party RBI Providers, Remote Browser Isolation (RBI) by Palo Alto Networks is available to integrate with
Prisma Access
natively. Unlike other isolation solutions, RBI uses next-generation isolation technologies to deliver near-native experiences for users accessing websites without compromising on security.
Here are the RBI providers
Prisma Access
integrates with—some providers might require you to add RBI environment details (like a vanity URL or tenant ID) to
Strata Cloud Manager
to set up the integration:
  • RBI by Palo Alto Networks
    To integrate with RBI by Palo Alto Networks, you must first enable Remote Browser Isolation.
  • Authentic8
    To integrate with Authentic8, have the vanity URL for the Authentic8 RBI environment at hand.
  • Proofpoint
    To integrate with Proofpoint, be ready to choose to use the Proofpoint production or PoC environment for RBI.
  • Ericom
    To integrate with Ericom, have the tenant ID for the Ericom RBI environment at hand.
  • Menlo Security
    You don’t need to configure any settings for the Menlo Security RBI environment; all you need to do is enable the integration.
Here’s how to add your third-party RBI provider to
Strata Cloud Manager
and specify the URL categories that’ll redirect users to the RBI environment.
  1. Set up Remote Browser Isolation (RBI).
    • Go to
      Manage
      Configuration
      Security Services
      URL Access Management
      Settings
      and open the
      Remote Browser Isolation Settings
      .
    • : Navigate to
      Manage
      Configuration
      Web Security
      Threat Management
      and open the
      Remote Browser Isolation Settings
      .
  2. Check if your RBI requires you to specify the RBI environment you want to use; if so, enter the required settings.
  3. Then, choose the third-party RBI provider you want to enable and
    Save
    . That’s it! When you next
    Push Config
    , your RBI provider will integrate with
    Prisma Access
    .
    You cannot use both RBI by Palo Alto Networks and a third-party RBI vendor for isolation. You must choose one or the other.
  4. Now, specify the URL categories that will redirect users to the RBI environment.
    Go to
    URL Access Management > Access Control
    and add or edit a
    URL Access Management Profile
    .
    In the
    Access Control
    settings, update
    Site Access
    to
    Redirect
    .
    The new
    Redirect
    action redirects users to the RBI environment instead of presenting them with a block page.

Recommended For You