Advanced URL Filtering
Use Transparent SafeSearch in Prisma Access
Table of Contents
Use Transparent SafeSearch in Prisma Access
Use Transparent SafeSearch to resolve mobile users' queries to the search engine's
SafeSearch portal.
| Where Can I Use This? | What Do I Need? |
|---|---|
If you'd like to use this feature in your Prisma Access
environment, get in touch with your account team to learn more.
|
|
Prisma Access allows you to resolve mobile users' search engine queries to the
engine's SafeSearch portal by performing an FQDN-to-IP mapping. Use transparent
SafeSearch as an alternative to implementing strict SafeSearch when traffic cannot
be decrypted (for example, at a store that provides guest internet access) and you want
to prevent users with unmanaged devices, including display devices, from searching for
restricted, inappropriate, or offensive material.
Use Transparent SafeSearch in Prisma Access (Strata Cloud Manager)
Configure transparent SafeSearch support for Prisma Access in Strata Cloud Manager.
To configure transparent SafeSearch support for Prisma Access in Strata Cloud Manager, complete the following steps. You can configure transparent
SafeSearch for either remote networks or GlobalProtect mobile users.
- Choose the deployment type (mobile users or remote networks) for which you want to configure SafeSearch.
- For Mobile Users—GlobalProtect
deployments, go to ; then, select .If you're using Strata Cloud Manager, go to ; then, select .
- For Remote Network deployments, go
to .If you're using Strata Cloud Manager, go to .
Select Advanced Settings.Use Static Entries to resolve FQDNs to specific IP addresses.Enter a unique Name for the static entry rule, the FQDN for the search engine, and the search engine's SafeSearch IP Address where the FQDN request should be directed.![]()
Use Transparent SafeSearch in Prisma Access (Panorama)
Configure transparent SafeSearch support for Panorama Managed Prisma Access.To configure transparent SafeSearch support for Prisma Access in Panorama, complete the following steps. You can configure transparent SafeSearch for either remote networks or GlobalProtect mobile users.- Choose the deployment type (remote networks or mobile users) for which you want to configure SafeSearch.
- For Mobile Users—GlobalProtect deployments, go to , select Configure in the Onboarding area; then, select Network Services.
- For Remote Network deployments, go to , click the gear to edit the Settings; then, select DNS Proxy.
Enter Static IP Entries by entering a unique Name for the static entry rule, the FQDN for the search engine, and the search engine's SafeSearch IP Address where the FQDN request should be directed.![]()
- For Mobile Users—GlobalProtect
deployments, go to ; then, select .
