Apps and Restrictions
Apps and Restrictions rule can only be applied when your proxy is set to perform HTTPS decryption.
Block Access to Consumer Google Accounts
The application is able to block access to consumer Google Accounts for Google Services as explained in this Google Help article.
To configure this functionality, first provide the list of domains to allow access for in Proxy Settings / Apps and Restrictions as shown on the following screenshot.
Then enforce limits of Google Apps for specific policy.
Please also be sure to check the google domains are not added to Global Exclusions or Policy Exclusions which might prevent proxy from HTTPS decrypting them.
Restricting Access to Specific Tenants in Microsoft Azure
The application is able to restrict access to cloud applications belonging to specific Tenants in Microsoft Azure as explained in this Microsoft Help article.
To configure this functionality, first provide the Tenant and Context info in Proxy Settings / Apps and Restrictions as shown on the following screenshot.
Then add the following domain names to Always Decrypted Domains in Proxy Settings
login.microsoftonline.com login.microsoft.com login.windows.net
And finally enforce tenant restrictions for specific policy. When users will try to login to the cloud application using different tenant than specified by the administrator - the access will be restricted.
Limiting Access to Microsoft Consumer Accounts
The application is able to limit access to Microsoft Consumer Accounts as shown on the following Microsoft Help article.
For example, if administrator would like to prevent users from signing into their personal Microsoft Outlook accounts, select the desired policy, open Apps and Restrictions filtering rule and set the checkbox as shown on the following screenshot.
When trying to login to personal account the user will be shown the following block page.
Enforcing Safe Search
The application is able to enforce the Safe Search settings for search on Google, Microsoft and Yahoo. To configure this setting, set the appropriate checkbox in the desired policy as show on the following screenshot.
If enabled, google page results will indicate safe search is used.