Advanced URL Filtering
Integrate with a Third-Party Remote Browser Isolation Provider
Table of Contents
Integrate with a Third-Party Remote Browser Isolation Provider
Redirect users from unknown or risky sites to an isolated environment hosted by a Remote
Browser Isolation provider.
| Where can I use this? | What do I need? |
|---|---|
|
Note: Prisma Access licenses include Advanced URL Filtering
capabilities.
|
While it’s the most secure action, blocking
unknown and risky sites can disrupt your users’ experience and productivity.
Remote Browser Isolation (RBI) redirects users from unknown or risky
sites to an isolated environment hosted by an RBI provider. The
website is rendered for the user and they can view the resources
they need, without directly accessing the unknown or risky site
from their endpoint.
Prisma Access easily integrates with
RBI providers for this type of browser redirection. In just a step
or two, you can choose the RBI provider to integrate with, and then
choose the URL categories that you want to direct to the RBI provider’s
hosted environment.
In addition to third-party RBI Providers, Remote Browser Isolation (RBI) by Palo
Alto Networks is available to natively integrate with Prisma Access. Unlike
other isolation solutions, RBI uses next-generation isolation technologies to
deliver near-native experiences for users accessing websites without
compromising on security.
Here are the RBI providers Prisma Access integrates with—some providers might require you to
add RBI environment details (like a vanity URL or tenant ID) to Strata Cloud Manager to set up the integration:
- RBI by Palo Alto NetworksTo integrate with RBI by Palo Alto Networks, you will need to configure Remote Browser Isolation.
- Authentic8To integrate with Authentic8, have the vanity URL for the Authentic8 RBI environment at hand.
- ProofpointTo integrate with Proofpoint, be ready to choose to use the Proofpoint production or PoC environment for RBI.
- EricomTo integrate with Ericom, have the tenant ID for the Ericom RBI environment at hand.
- Menlo SecurityYou don’t need to configure any settings for the Menlo Security RBI environment; all you need to do is enable the integration.
Here’s how to add your third-party RBI provider to Strata Cloud Manager and specify the URL
categories that will redirect users to the RBI environment.
- Set up Remote Browser Isolation (RBI).
- Go to and open the Third Party Remote Browser Isolation Settings.
- IF YOU’RE A WEB SECURITY ADMIN: Navigate to and open the Third Party Remote Browser Isolation Settings.
![]()
Check if your RBI requires you to specify the RBI environment you want to use; if so, enter the required settings.![]()
Then, choose the third-party RBI provider you want to enable and Save. That’s it! When you next Push Config, your RBI provider will integrate with Prisma Access.You can also Configure Remote Browser Isolation if you already purchased and activated the license for RBI by Palo Alto Networks. However, you cannot use both RBI by Palo Alto Networks and a third-party RBI vendor for isolation. If you choose to use RBI by Palo Alto Networks, select None, otherwise, select a third-party RBI vendor from Selected Third Party Vendor for Remote Browser Isolation.![]()
Now, specify the URL categories that will redirect users to the RBI environment.Go to URL Access Management > Access Control and add or edit a URL Access Management Profile.In the Access Control settings, update Site Access to Redirect.The new Redirect action redirects users to the RBI environment instead of presenting them with a block page.![]()
