Skip to content

Apps and Restrictions

Important

Apps and Restrictions rule can only be applied when your proxy is set to perform HTTPS decryption.

Block Access to Consumer Google Accounts

The application is able to block access to consumer Google Accounts for Google Services as explained in this Google Help article.

To configure this functionality, first provide the list of domains to allow access for in Proxy Settings / Apps and Restrictions as shown on the following screenshot.

Restrict Consumer Google Accounts Settings

Then enforce limits of Google Apps for specific policy.

Restrict Consumer Google Accounts Policy

Please also be sure to check the google domains are not added to Global Exclusions or Policy Exclusions which might prevent proxy from HTTPS decrypting them.

Restricting Access to Specific Tenants in Microsoft Azure

The application is able to restrict access to cloud applications belonging to specific Tenants in Microsoft Azure as explained in this Microsoft Help article.

To configure this functionality, first provide the Tenant and Context info in Proxy Settings / Apps and Restrictions as shown on the following screenshot.

Restrict Microsoft Azure Tenants in Proxy Settings

Then add the following domain names to Always Decrypted Domains in Proxy Settings

login.microsoftonline.com
login.microsoft.com
login.windows.net

Always Decrypted Domains

And finally enforce tenant restrictions for specific policy. When users will try to login to the cloud application using different tenant than specified by the administrator - the access will be restricted.

Tenant Restricted Message

Limiting Access to Microsoft Consumer Accounts

The application is able to limit access to Microsoft Consumer Accounts as shown on the following Microsoft Help article.

For example, if administrator would like to prevent users from signing into their personal Microsoft Outlook accounts, select the desired policy, open Apps and Restrictions filtering rule and set the checkbox as shown on the following screenshot.

Block Microsoft Consumer Accounts

When trying to login to personal account the user will be shown the following block page.

Blocked Page of Microsoft Consumer Account

The application is able to enforce the Safe Search settings for search on Google, Microsoft and Yahoo. To configure this setting, set the appropriate checkbox in the desired policy as show on the following screenshot.

Safe Search on Google and Microsoft

If enabled, google page results will indicate safe search is used.

Safe Search on Google Results