Prisma Access allows you to resolve mobile users' search engine queries to the
engine's SafeSearch portal by performing an FQDN-to-IP mapping. Use transparent
SafeSearch as an alternative to implementing strict SafeSearch when traffic cannot
be decrypted (for example, at a store that provides guest internet access) and you want
to prevent users with unmanaged devices, including display devices, from searching for
restricted, inappropriate, or offensive material.
Use Transparent SafeSearch in Prisma Access (Strata Cloud Manager)
Configure transparent SafeSearch support for Prisma Access in Strata Cloud Manager.
To configure transparent SafeSearch support for Prisma Access in Strata Cloud Manager, complete the following steps. You can configure transparent
SafeSearch for either remote networks or GlobalProtect mobile users.
Choose the deployment type (mobile users or remote networks) for which you want
to configure SafeSearch.
For Mobile Users—GlobalProtect
deployments, go to ManageService SetupMobile Users; then, select GlobalProtect SetupInfrastructure Settings.
If you're using Strata Cloud Manager, go to WorkflowsPrisma Access SetupMobile Users; then, select GlobalProtect SetupInfrastructure Settings.
For Remote Network deployments, go
to ManageService SetupRemote Networks.
If you're using Strata Cloud Manager, go to WorkflowsPrisma Access SetupRemote Networks.
Select Advanced Settings.
Use Static Entries to resolve FQDNs to specific IP
addresses.
Enter a unique Name for the static entry rule, the
FQDN for the search engine, and the search engine's
SafeSearch IP Address where the FQDN request should be
directed.
Use Transparent SafeSearch in Prisma Access (Panorama)
Configure transparent SafeSearch support for Panorama Managed
Prisma Access.
To configure transparent SafeSearch support for Prisma Access in Panorama, complete the following steps. You can configure transparent SafeSearch for
either remote networks or GlobalProtect mobile users.
Choose the deployment type (remote networks or mobile users) for which you want
to configure SafeSearch.
For Mobile Users—GlobalProtect
deployments, go to PanoramaCloud ServicesConfigurationMobile Users—GlobalProtect, select Configure in the
Onboarding area; then, select
Network Services.
For Remote Network deployments, go
to PanoramaCloud ServicesConfigurationRemote Networks, click the gear to edit the
Settings; then, select DNS
Proxy.
Enter Static IP Entries by entering a unique
Name for the static entry rule, the
FQDN for the search engine, and the search engine's
SafeSearch IP Address where the FQDN request should be
directed.