>
    Chromebook with Prisma Access Explicit Proxy
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access Mobile Users
    5. Mobile Users: Explicit Proxy
    6. Chromebook with Prisma Access Explicit Proxy
    Download PDF
    Prisma Access

    Chromebook with Prisma Access Explicit Proxy

    Table of Contents

    Chromebook with Prisma Access Explicit Proxy

    Learn how to use a Chromebook with explicit proxy.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Managed by Strata Cloud Manager)
    • Prisma Access (Managed by Panorama)
    • Mobile user license
    With the Proxy-Auto Configuration (PAC) file method, you can use a Chromebook with Prisma Access explicit proxy to access the internet. A PAC file is JavaScript code that tells a web browser how to connect to a proxy server. Enterprise environments employ PAC files to control web traffic and enforce Security policy rules. You can host your PAC file in your network or you can also use a forwarding profile to host it.

    Chromebook with Prisma Access Explicit Proxy (Strata Cloud Manager)

    Learn how to use a Chromebook with explicit proxy using Strata Cloud Manager.
    Complete the following steps using a PAC file.
    1. Enable explicit proxy.
    2. You can manage the PAC file by editing the PAC file directly or by using a forward profile.
      1. Edit an existing forwarding profile.
        1. Go to WorkflowsPrisma Access SetupMobile UsersForwarding Profiles Setup and click the gear icon.
        2. Select a forwarding profile with Agentless PAC file type and Edit PAC File.
        3. Edit the PAC file and add the following domains as DIRECT in the PAC file to send traffic for the hosts or domains, and then Save.
          if (shExpMatch(host, "*play.google.com") || 
        shExpMatch(host, "*android.l.google.com") || 
    shExpMatch(host, "*googleapis.com") || 
    shExpMatch(host, "*googleapis.com*") || 
    shExpMatch(host, "*android.com") ||
    shExpMatch(host, "*android.clients.google.com") ||
    shExpMatch(host, "*apps.chrome") ||
    shExpMatch(host, "*googletagmanager.com") ||
    shExpMatch(host, "*withgoogle.com") ||
    shExpMatch(host, "*google-analytics.com") ||
    shExpMatch(host, "*googleusercontent.com") ||
    shExpMatch(host, "*dns.google") ||
    shExpMatch(host, "*android.apis.google.com") ||
    shExpMatch(host, "*safebrowsing.google") ||
    shExpMatch(host, "*gvt1.com") ||
    shExpMatch(host, "*gvt2.com") ||
    shExpMatch(host, "*apps.chrome") ||
    shExpMatch(host, "*sites.google.com") ||
    shExpMatch(host, "*ogs.google.com") ||
    shExpMatch(host, "*m.google.com") |
    shExpMatch(host, "*contacts.google.com") ||
    shExpMatch(host, "*accounts.google.com") ||
    shExpMatch(host, "*mail.google.com") ||
    shExpMatch(host, "*www.google.com") ||
        shExpMatch(host, "*appengine.google.com") )
    { return "DIRECT"; }
        4. Select the forwarding profile that you have edited and copy the PAC file URL.
      2. Manage the PAC file by using a forwarding profile.
        1. Go to WorkflowsPrisma Access SetupMobile UsersForwarding Profiles Setup and click the gear icon.
        2. Go to Destinations and Add Destination. Add a Name, Description, add the domains under FQDNs, and Save. Add the following domains under FQDNs:
          • *play.google.com
          • *android.l.google.com
          • *googleapis.com
          • *android.com
          • *android.clients.google.com
          • *apps.chrome
          • *googletagmanager.com
          • *withgoogle.com
          • *google-analytics.com
          • *googleusercontent.com
          • *dns.google
          • *android.apis.google.com
          • *safebrowsing.google
          • *gvt1.com
          • *gvt2.com
          • *apps.chrome
          • *sites.google.com
          • *ogs.google.com
          • *m.google.com
          • *contacts.google.com
          • *accounts.google.com
          • *mail.google.com
          • *www.google.com
          • *appengine.google.com
        3. Go to Forwarding Profiles and Add Forwarding Profile with Agentless PAC file type. Add a Name, Description and select Forwarding Rules as a Definition Method.
        4. Add Forwarding Rule for the forwarding profile. Add a Name, User Location, Destination and select Proxy as Direct. Add to save the changes.
        5. Save and Push Config to push the changes.
        6. Select the forwarding profile that you have created or edited and copy the PAC file URL.
    3. Deploy the copied PAC file URL on the Chromebook endpoint to access the internet through Prisma Access explicit proxy.

    Chromebook with Prisma Access Explicit Proxy (Panorama)

    Learn how to use a Chromebook with explicit proxy using Panorama.
    You can manage the PAC file by editing the PAC file directly. Complete the following steps using a PAC file.
    1. Enable explicit proxy.
    2. Go to PANORAMACloud ServicesConfigurationExplicit Proxy.
    3. Create a new PAC file or if you have an existing PAC file, select the PAC file under PAC FILE URL, and download it.
    4. Edit the PAC file and add the following URLs and set them as DIRECT.
      if (shExpMatch(host, "*play.google.com") || 
        shExpMatch(host, "*android.l.google.com") || 
    shExpMatch(host, "*googleapis.com") || 
    shExpMatch(host, "*googleapis.com*") || 
    shExpMatch(host, "*android.com") ||
    shExpMatch(host, "*android.clients.google.com") ||
    shExpMatch(host, "*apps.chrome") ||
    shExpMatch(host, "*googletagmanager.com") ||
    shExpMatch(host, "*withgoogle.com") ||
    shExpMatch(host, "*google-analytics.com") ||
    shExpMatch(host, "*googleusercontent.com") ||
    shExpMatch(host, "*dns.google") ||
    shExpMatch(host, "*android.apis.google.com") ||
    shExpMatch(host, "*safebrowsing.google") ||
    shExpMatch(host, "*gvt1.com") ||
    shExpMatch(host, "*gvt2.com") ||
    shExpMatch(host, "*apps.chrome") ||
    shExpMatch(host, "*sites.google.com") ||
    shExpMatch(host, "*ogs.google.com") ||
    shExpMatch(host, "*m.google.com") |
    shExpMatch(host, "*contacts.google.com") ||
    shExpMatch(host, "*accounts.google.com") ||
    shExpMatch(host, "*mail.google.com") ||
    shExpMatch(host, "*www.google.com") ||
        shExpMatch(host, "*appengine.google.com") )
    { return "DIRECT"; }
    5. Select the CONNECTION NAME. Under Proxy Auto Configuration, Browse the edited PAC file and click OK.
    6. Commit and push to Explicit_Proxy_Device_Group.

    © 2025 Palo Alto Networks, Inc. All rights reserved.