00:00Configuring browser isolation, now officially part of Zscaler Zero Trust Browser, Cloud Browser Isolation in Zscaler Internet Access, ZIA, involves
00:10a three-phase workflow.
00:12Here is the step-by-step guide to setting it up.
00:15Phase 1. Enable all the feature in your tenant.
00:18Verify prerequisites.
00:20Ensure Internet and Saizia and or Zscaler Private Access, ZPA are active on your tenant.
00:26Contact Zscaler Support. Request that Cloud Browser Zero Trust Browser Isolation be provisioned and enabled for your organization's Zscaler tenant.
00:36Phase 2. Create Isolation Profiles.
00:39An isolation profile defines how the remote browser looks and behaves for the end user.
00:44For example, custom banners, root certificates, clipboard, sprinting restrictions.
00:49Log in to the Zscaler admin portal.
00:52Navigate to Zero Trust Browser, then Isolation Profiles, or Browser Isolation Profiles, depending on your console version.
01:00Click Add Isolation Profile.
01:03Configure your profile settings.
01:06Profile Name and Description.
01:07Give it a clear identify, for example.
01:10Contract to Isolation Profile.
01:12Banner, Themes.
01:14Customize the notification banner that appears at the top of the browser session so users know they are in an
01:20isolated session.
01:21Root Certificates.
01:23Assign custom root certificates if required for SSL inspection or internal site rendering.
01:29User Controls.
01:30End User Experience.
01:31Set restrictions for clipboard actions.
01:34Copy slash paste.
01:35File Downloads slash uploads.
01:37And printing inside the remote browser.
01:39Click Save and Activate.
01:40Phase 3.
01:42Configure Forwarding and Isolation Policies.
01:45You must tell Zscaler which web traffic or category should be redirected to the remote browser.
01:50You can do this via URL Filtering Policies or Smart Browser Isolation.
01:55Option A.
01:56Standard URL Filtering Policy to isolate specific categories.
02:00Go to Policy then URL Filtering or Internet and SaaS Policies.
02:05Add a new URL Filtering Rule or edit an existing one.
02:09Define the criteria.
02:12Criteria.
02:13Select targeted users, departments, or specific high-risk URL categories.
02:18For example, newly registered domains, rundown slash untrusted sites, or social media.
02:24Under the action settings, set the forwarding or isolation action to isolate, routing the mass traffic through your newly created
02:31isolation profile.
02:32Click Save and Activate.
02:34Option B.
02:35AI ML Driven Smart Browser Isolation.
02:38Documentative for Threat Protection.
02:40If you want Zscaler's AI ML Engines automatically isolate suspicious or unverified domains.
02:47Ensure, inspect, inbound traffic, and inspect outbound traffic are enabled under Cyber Threat Protection.
02:53Then Malware Protection and Malware Policy.
02:56Go to Zero Trust Browser then Browser Isolation, Internet Access, then Smart Isolation via the Zscaler Help Portal Guide.
03:03Click Edit and toggle on AI ML-based Smart Browser Isolation.
03:07Select the applicable users or groups, up to 32 each by default.
03:12Choose your target browser isolation profile.
03:14Click Save and activate the change.
03:17And that's the full picture.
03:18If this saved you a search, hit like and subscribe.
03:21One quick answer every day.
03:23See you in the next one.
