Integrate with a Third-Party Remote Browser Isolation Provider
Focus
Focus
Advanced URL Filtering

Integrate with a Third-Party Remote Browser Isolation Provider

Table of Contents

Integrate with a Third-Party Remote Browser Isolation Provider

Redirect users from unknown or risky sites to an isolated environment hosted by a Remote Browser Isolation provider.
Where can I use this?What do I need?
  • Prisma Access (Managed by Strata Cloud Manager)
Note: Prisma Access licenses include Advanced URL Filtering capabilities.
While it’s the most secure action, blocking unknown and risky sites can disrupt your users’ experience and productivity. Remote Browser Isolation (RBI) redirects users from unknown or risky sites to an isolated environment hosted by an RBI provider. The website is rendered for the user and they can view the resources they need, without directly accessing the unknown or risky site from their endpoint.
Prisma Access easily integrates with RBI providers for this type of browser redirection. In just a step or two, you can choose the RBI provider to integrate with, and then choose the URL categories that you want to direct to the RBI provider’s hosted environment.
In addition to third-party RBI Providers, Remote Browser Isolation (RBI) by Palo Alto Networks is available to natively integrate with Prisma Access. Unlike other isolation solutions, RBI uses next-generation isolation technologies to deliver near-native experiences for users accessing websites without compromising on security.
Here are the RBI providers Prisma Access integrates with—some providers might require you to add RBI environment details (like a vanity URL or tenant ID) to Strata Cloud Manager to set up the integration:
  • RBI by Palo Alto Networks
    To integrate with RBI by Palo Alto Networks, you will need to configure Remote Browser Isolation.
  • Authentic8
    To integrate with Authentic8, have the vanity URL for the Authentic8 RBI environment at hand.
  • Proofpoint
    To integrate with Proofpoint, be ready to choose to use the Proofpoint production or PoC environment for RBI.
  • Ericom
    To integrate with Ericom, have the tenant ID for the Ericom RBI environment at hand.
  • Menlo Security
    You don’t need to configure any settings for the Menlo Security RBI environment; all you need to do is enable the integration.
Here’s how to add your third-party RBI provider to Strata Cloud Manager and specify the URL categories that will redirect users to the RBI environment.
  1. Set up Remote Browser Isolation (RBI).
    • Go to ManageConfigurationNGFW and Prisma AccessSecurity ServicesURL Access ManagementSettings and open the Third Party Remote Browser Isolation Settings.
    • IF YOU’RE A WEB SECURITY ADMIN: Navigate to ManageConfigurationWeb SecurityThreat Management and open the Third Party Remote Browser Isolation Settings.
  2. Check if your RBI requires you to specify the RBI environment you want to use; if so, enter the required settings.
  3. Then, choose the third-party RBI provider you want to enable and Save. That’s it! When you next Push Config, your RBI provider will integrate with Prisma Access.
    You can also Configure Remote Browser Isolation if you already purchased and activated the license for RBI by Palo Alto Networks. However, you cannot use both RBI by Palo Alto Networks and a third-party RBI vendor for isolation. If you choose to use RBI by Palo Alto Networks, select None, otherwise, select a third-party RBI vendor from Selected Third Party Vendor for Remote Browser Isolation.
  4. Now, specify the URL categories that will redirect users to the RBI environment.
    Go to URL Access Management > Access Control and add or edit a URL Access Management Profile.
    In the Access Control settings, update Site Access to Redirect.
    The new Redirect action redirects users to the RBI environment instead of presenting them with a block page.