The "Web Isolation" action does not work if the name of the object is "Isolation_Category"

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

A UPE policy is created with the action "Isolate(yes)" and a destination category named "Isolation_Category" that contains the categories designated for web-isolation.

 

Environment

Cloud SWG and Web-isolation.

Cause

The "Isolation_Category" keyword is not allowed for customer use in UPE.

The string will be sent upstream to Cloud SWG and replaced there with a category name "UPE__isolation_suppressed".

The process also created an empty definition of that category:

;;
;; UPE generated Isolation suppression objects - entitled tenant
;;

define condition UPE__isolation_suppressed
end

Resolution

You can use alternate strings for the category name for "WebIsolation_Category" or something more specific depending on your use case (isolation_default_gategory, isolation_highrisk_category etc).