Cloudflare Browser Isolation Setup

cloudflare browser isolation setup secures browsing activity by isolating the process of loading webpages from the user devices that display the webpages.

As part of our Server administration services, Bobcares responds to all queries, big and small.

Let’s look at how to configure cloudflare browser isolation in more detail.

Cloudflare Browser Isolation

By executing active webpage content in a secure isolated browser, Cloudflare Browser Isolation adds to the Secure Web Gateway and Zero Trust Network Access solutions. By executing active content from the endpoint, it protects users from zero-day attacks and malware. Browser Isolation protects users from phishing attacks by preventing user input on dangerous websites and controlling data transmission to sensitive web applications, in addition to protecting endpoints.

The user is unaware that they are using remote browsing because they are continuing to use their preferred browser and habits. By default it will isolate every open tab and window. We can define policies to dynamically isolate websites based on identity, security threats, or content, just like we can define policies to filter traffic based on content categories or security threats with Gateway.

On the Zero Trust Dashboard, go to Policies > HTTP policies to create Browser Isolation policies. Select the Isolate or Do Not Isolate actions in the rule builder to enable or disable isolation for specific websites or content.

Benefits of browser isolation

1. Downloads that are dangerous are removed.
2. Scripts that are malicious do not run on a device or in a private network.
3. It blocks browser-based zero-day exploits.
4. Without having to block entire websites, It can block malicious web content..

Cloudflare Browser Isolation Setup

Secure Web Gateway HTTP policies enable browser isolation. Unless we add an Isolation policy to HTTP policies, It will not isolate any traffic by default. To begin isolating our traffic, we must do the following:

1. Firstly, create a Cloudflare Zero Trust account and add Browser Isolation to either the Zero Trust Standard or Zero Trust Enterprise plan as an add-on.
2. Then, get the most recent version of the WARP client.
3. Then, create a Device enrollment rule .
4. Finally, establish an isolation policy.

Cloudflare Browser Isolation works in tandem with our current web browser. Open our browser and navigate to any websites we normally use after connecting to Cloudflare WARP. Every tab is connected to an isolated browser running on Cloudflare’s edge.

How to check if a webpage is isolated

The simplest way to determine whether a webpage is proxied through Cloudflare is to look for the presence of a Cloudflare Root CA. In Chrome, select Certificate by clicking the padlock to the left of our address bar.

​​Normal Browsing

Non-Cloudflare Root CA:The absence of a Cloudflare for Teams root certificate indicates that Cloudflare did not proxy this page. ​​

Normal context menu:All standard options will be available in the right-click context menu. ​​

​​Isolated Browsing

Cloudflare Root CA:Cloudflare for Teams + Gateway intermediate status indicates that traffic was routed through Cloudflare Gateway. ​​

Simplified context menu:Context menu on right-click is so simple. ​​​​

Disconnecting Browser Isolation

If we want to disable Browser Isolation temporarily, we can do so by selecting the WARP agent and disconnecting the client. ​​

macOS

1. Firstly, In the Menu Bar, click the Cloudflare logo. ​​
2. Then, Toggle the blue Disconnected switch to the off position. ​​
3. Finally, To return to the non-isolated page, refresh the page. ​​

Windows

1. Firstly, click on the Cloudflare logo from the System Tray. ​​
2. Then, toggle the blue Disconnected switch to the off position. ​​
3. Finally, to return to the non-isolated page, refresh the page. ​​

[Looking for a solution to another query? We are just a click away.]

Conclusion

To sum up, our knowledgeable engineers demonstrated in greater detail how to configure cloudflare browser isolation.