Cannot update (or create) an isolation rule with the "Block Unless Isolate / Document Isolate" action in Group B

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

WSS admin using Portal to manage WSS policies.

Admin leveraging Web Isolation Threat protection policies rules that leverage the "Block Unless Isolated" verdict.

Admin tried to create a new Web Isolation threat protection rules in Group B with the "Block Unless Isolate / Document Isolate" action but when trying to save the rule, the following "unknown server error has occurred" is message is rendered and policy change is not saved.

Trying to update an existing Web Isolation Threat Protection rule in Group B with the "Block Unless Isolate / Document Isolate" action results in the same "unknown error" message.

Problem only visible since the announced Portal update from August 22 2022.

Environment

WSS using Portal to manage WSS policies, and not UPE.

Web Isolation Threat protection Group B policies enabled.

Cause

Portal update from August 22 2022 caused the issue.

Resolution

Fixed with Portal update August 26 2022.

Workaround the issue by creating a Group A rule with the Block Unless Isolation verdict, and then moving it to Group B.