Configure JumpCloud for IP-Based Enforcement

1. Configure the Prisma Browser Application Enforcement. In the JumpCloud Admin Portal, perform the following steps:

   1. Select Security Management -> Conditional Lists and click the +.

   2. In the New IP List, enter the following information:

      1. List Name - Prisma Access Authentication Proxy.
      2. Description - Enter an optional description for the list.
      3. IP Addresses - Enter the list of egress IP addresses.

      Click Save.

      A message will display indicating that the list was created.

   3. Select Security Management -> Conditional Policies and click the +.

   4. Click User Portal.

   5. In the General Info section, enter the following information:

      • Policy Name - Enter a name for the policy, for example - Allow access only from the Prisma Browser.
      • Description - Enter an optional description.
      • Policy Status - Make sure that this is set to 'On'.

   6. In the Assignments section, click All Users or Select User Groups.

      Admins can select All Users or individual user groups. Additionally, admins can select groups that are to be excluded from the policy.

      For example, the policy can be applied to all users, but the admins can be excluded.
   7. In the Conditions section, do the following:

      • Click Add conditions and select IP addresses.
      • IP address: Select not on list, and for the list - select Prisma Access Authentication Proxy.
   8. In the Action section, enter the following information:

      • For Access, select Denied.
      • For Authentication, select based on your corporate policy.

2. Return to IP-Based Enforcement and complete step 3 to select JumpCloud and turn on enforcement.