Configure Remote Browser Isolation

Note: Remote browser isolation is a limited-availability feature and may not be enabled for your account.

Available at the account level, the remote browser isolation feature allows a user to redirect a blocked request to a remote browser isolation service. A block page, available for selection when a category is configured with Block Access, provides the user the option to View in Remote Browser. When that option is available and selected, the request is forwarded to the provider. See Managing categories, actions, and SSL decryption for information on configuring categories in a policy

Use the Web > Settings > Remote Browser Isolation page to enable and configure the feature.

Steps

By default, Disabled is selected. Click the radio button next to the appropriate provider and continue with the configuration to enable remote browser isolation.

Only one provider can be selected.

The block page that allows a user to View in Remote Browser is available for selection when configuring categories in a policy when remote browser isolation is enabled and configured. Remote browser isolation cannot be disabled If this block page has been assigned for use by a category

Note: This feature requires a subscription with a supported remote browser isolation provider.
Enter the Tenant ID or Hostname or IP address used for the provider.

Customers using Ericom as the provider should get the Tenant ID from the fulfillment letter received when the feature was purchased.

An read only entry on the Proxy Bypass tab of the Bypass Settings page is automatically added. The entry is added so that all traffic sent to the provider’s IP address bypasses the cloud service for all policies. The entry is automatically updated or removed based on changes made to remote browser isolation configuration.
Use the Test button to confirm a connection to the provider.

Click the button to open www.google.com in a new browser window, where you can enter the credentials required by the provider. The Google home page should then display.

Note that only clientless provider services are supported. Connections that require the installation of an agent or browser plugin are not supported.
Click Save.

Note: If a user has opted to View in Remote Browser, the request is no longer handled by the cloud service. Subsequent requests from the same browser will continue to be handled by the remote browser isolation provider until browser window is closed.