Chromebook with Prisma Access Explicit Proxy (Strata Cloud Manager)

Chromebook with Prisma Access Explicit Proxy (Strata Cloud Manager)

1. Enable explicit proxy.
2. You can manage the PAC file by editing the PAC file directly or by using a forward profile.

   1. Edit an existing forwarding profile.

      1. Go to WorkflowsPrisma Access SetupMobile UsersForwarding Profiles Setup and click the gear icon.
      2. Select a forwarding profile with Agentless PAC file type and Edit PAC File.

         

      3. Edit the PAC file and add the following domains as DIRECT in the PAC file to send traffic for the hosts or domains, and then Save.

         if (shExpMatch(host, "*play.google.com") || 
                 shExpMatch(host, "*android.l.google.com") || 
             shExpMatch(host, "*googleapis.com") || 
             shExpMatch(host, "*googleapis.com*") || 
             shExpMatch(host, "*android.com") ||
             shExpMatch(host, "*android.clients.google.com") ||
             shExpMatch(host, "*apps.chrome") ||
             shExpMatch(host, "*googletagmanager.com") ||
             shExpMatch(host, "*withgoogle.com") ||
             shExpMatch(host, "*google-analytics.com") ||
             shExpMatch(host, "*googleusercontent.com") ||
             shExpMatch(host, "*dns.google") ||
             shExpMatch(host, "*android.apis.google.com") ||
             shExpMatch(host, "*safebrowsing.google") ||
             shExpMatch(host, "*gvt1.com") ||
             shExpMatch(host, "*gvt2.com") ||
             shExpMatch(host, "*apps.chrome") ||
             shExpMatch(host, "*sites.google.com") ||
             shExpMatch(host, "*ogs.google.com") ||
             shExpMatch(host, "*m.google.com") |
             shExpMatch(host, "*contacts.google.com") ||
             shExpMatch(host, "*accounts.google.com") ||
             shExpMatch(host, "*mail.google.com") ||
             shExpMatch(host, "*www.google.com") ||
                 shExpMatch(host, "*appengine.google.com") )
             { return "DIRECT"; }

      4. Select the forwarding profile that you have edited and copy the PAC file URL.
   2. Manage the PAC file by using a forwarding profile.

      1. Go to WorkflowsPrisma Access SetupMobile UsersForwarding Profiles Setup and click the gear icon.
      2. Go to Destinations and Add Destination. Add a Name, Description, add the domains under FQDNs, and Save. Add the following domains under FQDNs:
         • *play.google.com
         • *android.l.google.com
         • *googleapis.com
         • *android.com
         • *android.clients.google.com
         • *apps.chrome
         • *googletagmanager.com
         • *withgoogle.com
         • *google-analytics.com
         • *googleusercontent.com
         • *dns.google
         • *android.apis.google.com
         • *safebrowsing.google
         • *gvt1.com
         • *gvt2.com
         • *apps.chrome
         • *sites.google.com
         • *ogs.google.com
         • *m.google.com
         • *contacts.google.com
         • *accounts.google.com
         • *mail.google.com
         • *www.google.com
         • *appengine.google.com

         

      3. Go to Forwarding Profiles and Add Forwarding Profile with Agentless PAC file type. Add a Name, Description and select Forwarding Rules as a Definition Method.

         

      4. Add Forwarding Rule for the forwarding profile. Add a Name, User Location, Destination and select Proxy as Direct. Add to save the changes.

         

      5. Save and Push Config to push the changes.
      6. Select the forwarding profile that you have created or edited and copy the PAC file URL.
3. Deploy the copied PAC file URL on the Chromebook endpoint to access the internet through Prisma Access explicit proxy.