Extended RBI

The Extended RBI feature covers additional risk scenarios which are not included in Targeted RBI, i.e. additional web categories and unsanctioned cloud apps which do not require full isolation.

Extended RBI protects the browsing activity and browser for corporate users accessing unsanctioned cloud apps and websites.

Extended RBI allows admins to leverage additional policy matching criteria including:

The following web categories are available to isolate unsanctioned web apps:

WEB CATEGORY	DESCRIPTION	SAMPLE URLs
Abortion	Web pages that discuss abortion from a historical, medical, legal, or other not overtly biased point of view. Examples are abortion pill, pregnancy termination, fetal abortion etc.	abortion.com, gynpages.com, abortionfacts.com, prochoice.org
Adult Content - Other	Sites with adult content (sex, nudity, gambling, gay, lesbian, bisexual, violence) are categorized under this category.
Advocacy Groups & Trade Associations	Sites that provide information on Industry trade groups, lobbyists, unions, special interest groups and professional organizations.	iso.org, hrw.org, ori.org
Alcohol	Web pages that show alcoholic drinks and beers. Examples are whiskey, vodka, ale, etc.	thewinecellarinsider.com, johnniewalker.com, carabal.es
Arts	Sites that contain creative art judged solely for its intellectual or aesthetic components.	vangoghgallery.com, artble.com, vggallery.com
Auctions & Marketplaces	Sites that discuss person-to-person selling or trading of goods and services through classified or online auctions.	ebay.com, trademe.co.nz, bidorbuy.co.za
Automotive	Sites that provide information about the automotive industry that connects vehicle shoppers with sellers.	ford.com, volvocars.com, mercedes-benz.com
Business Intelligence and Data Analytics	Business intelligence (BI) sites transform raw data into meaningful and useful information for business analysis purposes. BI technologies are capable of handling large amounts of unstructured data to help identify, develop, and create new strategic business opportunities.	kaggle.com, tensorflow.org, datasciencecentral.com
Business Process Management	Business process management (BPM) sites focus on improving corporate performance by managing and optimizing company business processes.	foliometrics.co.uk, mackeyrms.com, qualtrics.com
Collaboration	Sites where two or more organizations work together to realize shared goals. For example, an endeavour that is creative in nature by sharing knowledge, learning, and building consensus.	sharepoint.com, slack.com, zoom.us
Content Management	Content management (CM) sites support the collection, managing, and publishing of information in any form or medium. Digital content may take the form of text (such as electronic documents), multimedia files (such as audio or video files), or any other file type.	cloudinary.com, clearvoice.com, drupal.org
Dating	Sites related to marriage (not weddings), online dating, matchmaking, relationship advice, and personal ads.	match.com, tinder.com, cupid.com
Development Tools	Software development sites provide code repositories, review boards, branch management functions, bug tracking, flowcharts, and UI mockups.	developer.salesforce.com, visualstudio.microsoft.com, github.com
E-Commerce Tools	Electronic commerce sites, commonly known as E-commerce or eCommerce, provide trading products or services using computer networks, such as the Internet. Includes mobile commerce, electronic funds transfer, supply chain management, Internet marketing, online transaction processing, electronic data interchange (EDI), inventory management systems, and automated data collection systems.	magento.com, bigcommerce.com, 3dcart.com
Education	Education sites provide information on teaching, training, or research and provides guidance on convenient and portable learning options.	cambridge.org, collegeboard.org, turnitin.com
Entertainment	Sites that provide electronics for entertainment such as television, CD players, DVD players, etc.	tmz.com, hollywoodreporter.com, cinemablend.com
Family & Parenting	Sites that teach parents how to deal with their kids. Examples are k6 parenting, parenting kinder to 6th grade, etc.	babycenter.com, parents.com, babynames.com
Fashion	Sites that discuss additional fashion elements, such as fashion models, agencies and others. Examples are modeling agency, fashion modeling etc.	gap.com, hm.com, victoriassecret.com
File Repositories	Sites with collections of downloadable software, downloadable applications, etc. Also includes repositories of screen savers, wallpapers, web templates, ringtones, and any site with a collection of files. Excludes downloads of themes which fall into Hobbies-Themes. Can be paired with Piracy & Copyright if it involves non-licensed downloads. Examples include web templates, file collection, file repositories, etc.	thenounproject.com, shapes4free.com, softonic.com
File / Software Download Sites	Sites that host software on their own servers, so that it's available for download 24/7.
Finance/Accounting	Accounting sites include financial accounting, management accounting, auditing, and tax accounting.	paypal.com, chase.com, wellsfargo.com
Financial Aid & Scholarships	Sites that assist debit loans, credit loans in case of job loss or unemployment. This category also includes sites that show relevant information on scholarships or grants for the jobless, laid-off workers or low-income employees, which can either be a partial or a full coverage.	cafam.com.co, mybenefitscalwin.org, needhelppayingbills.com
Financial News	Sites with news and articles on the aspects of finance. Examples are financial news, finance news etc.	marketwatch.com, finance.yahoo.com, investopedia.com
Food & Drink	Sites that contain food and drink specific supply chain information or preparation procedure.	benjerry.com, nestle.com, foodlion.com
Forums	Sites dedicated to forums, newsgroups, email archives, bulletin boards, and other community-driven content. Sites with more than six or so contributors that can initiate a topic or thread should be considered Community Forums unless either Social Networking or Wikis is more applicable. For sites dedicated to specific content (such as cars) where part of the site contains forums, use the Rule of Thirds to determine the applicability of this category. If the page is specifically a forum page on a topic, give the page both categories. Examples include forums, mailing list, newsgroups, etc.	quora.com, stackoverflow.com, blackbaud.com
Generative AI	Sites that use machine learning techniques to generate new data from existing data sets, including text, images, and videos.	chat.openai.com, http://jasper.ai, http://beautiful.ai
Government & Legal	Sites for legal entities made by the government to manage commercial activities on its behalf. These include enterprises or corporations owned by the government, but run by private individuals. This also includes sites that tackle issues and laws on legal aspects.	state.gov, europa.eu, whitehouse.gov
Health & Nutrition	Sites that discuss information, tips, guide and others related to health, wellness, eating healthy, and diet plans.	medtronic.com, uptodate.com, medline.com
Hobbies & Interest	Sites that contain on online directory of activities during your free time and which provides information about how to find and start a new hobby.	discoverahobby.com, eflorist.com, comofazerartesanatos.com.br
Home & Garden	Sites that provide information on the latest interior design ideas, beautiful lifestyle inspiration, garden designs, etc.	garden.org, finegardening.com, casarte.com
Insurance	Sites that offers any type of insurance, insurance company, or government insurance program from medicare to car insurance to life insurance. Examples are accident insurance, travel insurance, self insurance, etc.	usaa.com, progressive.com, statefarm.com
Investors & Patents	Sites that include information on investment business that creates, incubates, and commercializes inventions. Examples are kick-starting, crowdfunding, patents on inventions, patent, patent registration, patented invention, etc.	indiegogo.com, proactiveinvestors.com, apoia.se
Job Search / Careers	Job posting pages on company sites, job search sites, interview tips, job-related classifieds, temp work, contract work asked or offered, etc. Also includes sites that show information, tips or guidance for career advice and provides information. In addition, includes sites that provide step-by-step process and analysis on how to achieve good career plans and sites that do not fall to any specific category under Careers. This also includes sites that have three or more Career categories.	careerbuilder.com, indeed.com, job.com
Kids	Sites for kids that provide online teaching games, printables, videos, etc.	scholastic.com, toysrus.com, lego.com
Lifestyle	Sites with advertising or products designed to appeal to a consumer by association with a desirable lifestyle.	accessconsciousness.com, marcus.co.uk, kak-bog.ru
Logistics	Logistics sites provide information about transferring products from producer to consumer, including storage, transport, shipment, warehousing, material handling and packaging with associated exchange of information.	fedex.com, descartes.com, assetpanda.com
Marijuana	Sites that promote or sell marijuana products.
Military	Sites sponsored by or devoted to the armed forces. Includes Army, Navy, Marines, Air Force, and Coast Guard web sites.	army.mil, af.mil, navy.mil
News & Media	Online (or offline) news sites covering news and events. Also includes collection of written articles that are printed in ink or distributed online, like magazines.	cnn.com, nytimes.com, washingtonpost.com, foxnews.com
Nursing	Nursing sites that post job vacancies, job descriptions, and other related information significant to Nursing.	nursingworld.org, nursingtimes.net, allnurses.com
Personal Sites & Blogs	Blog sites are a platform for individuals to share news, opinions, and information about themselves in a date-stamped web log. Personal pages about an individual or that individuals family (also written in the first-person).	isuwannee.com, blogspot.com, googleblog.com
Pets	Sites that provide information and articles on domestic animals. Examples are cats, dogs, veterinary medicine.	petco.com, petfinder.com, petsmart.com
Philanthropic Organizations	Charities and other non-profit philanthropic organizations and foundations dedicated to altruistic activities intended to increase the quality of life for groups or individuals. Also includes web sites that rate and review charities or act as conduits for online donations to selected charities. Examples are charitable giving, fund raisers, disaster relief sites, etc.	worldvision.org, unrefugees.org, redcross.org
Photo Sharing	Sites that host digital photographs and allow users to upload, search, and exchange photos and images online. Also includes galleries and albums of photos hosted on businesses or personal web sites. Also includes online photo printing where photographs may be uploaded and ordered as prints. Examples are photo albums, photo gallery, photo sharing, etc.	web.500px.com, snapfish.com, istockphoto.com
Real Estate	Sites that provide information about buying and selling of homes and private estates. Also includes the sites that provide information about renting, leasing, buying, and selling of land and buildings.	zillow.com, realtor.com, sothebysrealty.com
Religion	Information sites and articles on religions from around the world, including their beliefs, practices, rituals, creeds, ethics, and history.	jw.org, biblegateway.com, biblehub.com
Science	Sites that discuss the study and information in any branch of science. For example Biology, Chemistry, Physics, Space/Astronomy, etc.	ncbi.nlm.nih.gov, sciencedirect.com, nature.com
Search Engines	Sites used to search the Internet and find other web pages. Excludes Image Search and Engines under Shopping group. Also includes white pages, yellow pages, and business search directories whether global or local. For example, business listings, find people, people finder, etc.	google.com, bing.com, yahoo.com
Shopping	Sites that users visit to purchase and / or sell goods, services online.	walmart.com, target.com, bestbuy.com
Social & Affiliation Organizations	Sites for social organizations and groups that form around common interests where the primary purpose is to meet for social purposes or to meet people with common interests. Clubs may be devoted to social activities, hobbies, religion, politics, etc. Excludes sports clubs, teams, and organizations. Examples include book clubs, scouts, sororities, etc.	acs.org, kde.org, ics.org
Sports	Web pages that provide information on news, events, schedules, rankings, and other aspects of sports.	247sports.com, nba.com, espn.com
Survey Solutions	Sites for survey methodology studies, like the sampling of individual units from a population and the associated survey data collection techniques, such as questionnaires and the construction and methods for improving the number and accuracy of responses to surveys.	surveymonkey.com, surveygizmo.com, jotform.com
Technology	Sites related to technology. Examples are design web templates, robotics, cloud computing software, drones, etc.	javaworld.com, ubuntu.com, apple.com
Telecommuting	Sites that depict working remotely (employees that do not commute to a central place of work). Examples are remote work, telework, home based jobs, etc.	cjinc.info, freeeup.com, myworkforlife.com
Tobacco	Sites that promote or sell tobacco products, such as cigarettes, cigars, shisha, and chew.	cigarsinternational.com, allcigs.com, thompsoncigars.com
Trading & Investing	Sites assisting in investing, trading, stock, and share dealing.	fidelity.com, schwab.com, vanguard.com
Translation	Sites that translate from one language to another. Examples include translator sites, language translator, online language translators, etc.	translate.google.com, translator.microsoft.com, freetranslation.com
Travel	Sites that provide travel information, guidance, and tips on travel. Also includes sites with information, travel timetable, online bookings, hotels, and other related details on travel.	booking.com, tripadvisor.com, expedia.com
Weapons	Site with guns and weapons not used in a violent manner, such as descriptions, sport hunting, gun clubs, or paintball. It also includes other weapons like crossbows, knives, etc. For example, guns, crossbows, knives, rifles, etc.
Web Analytics	Web analytics sites that measure, collect, analyze, and report web data to understand and optimize web usage. Web analytics applications can also help companies measure the results of traditional print or broadcast advertising campaigns.	count.ly, crazyegg.com, heapanalytics.com
Web Design	Web design sites encompass many different skills and disciplines in the production and maintenance of websites. The different areas of web design include web graphic design, interface design, authoring, including standardized code and proprietary software, user experience design, and search engine optimization.	sites.google.com, civicplus.com, squarespace.com
Web Hosting	Web hosting and blog hosting sites, and also Internet Service Providers (ISPs), and telecommunications (phone) companies. Examples are ISP, internet access, cable modem etc.	godaddy.com, bluehost.com, hostinger.com

Application Suite*

Cloud app matching is available for narrow matching criteria (isolating the app) for the following cloud apps and associated web categories.

WEB CATEGORY	CLOUD APP
Application Suites	Google accounts Microsoft Live accounts Microsoft accounts Yahoo accounts NOTE: Application suite is required to support log in for some of the apps in scope, which belong to cloud app suites, where log in domains have their own category.
Chat, IM & other communication	WhatsApp
Cloud storage	WeTransfer Box Dropbox Google Drive Microsoft OneDrive iCloud Drive Microsoft Office 365 OneDrive for Business
Professional Networking	LinkedIn
Social	Facebook Twitter
Web Mail	Google Gmail Outlook Live (OWA) Yahoo Mail

The additional policy criteria are available to use:

Use cases and recommended configurations are described in the sections below.

1- Safely enable web access to unsanctioned cloud apps in a certain web category

Sanctioned apps in these web categories are controlled by CASB controls. Protect endpoint and leverage RBI templates settings to augment data protection capabilities in the isolated session e.g. printing, copy, paste, read-only, uploads, downloads.

2 – Safely enable access to potentially risky apps in a web category, based on CCL

Leverage Netskope’s CCI database to isolate low level confidence apps. e.g. Allow (excellent), Block (poor), Isolate (low CCL). Use RBI as an additional protection and an alternative to block access.

3 – Safely expand access to web pages in a potential risky destination country

RBI Provides additional protection of a user’s privacy because the browser has no context of the user and exposes RBI egress IPs. Actual source IP, endpoint details are not uncovered. This is ideal for research.

4 – Define Fine grain Isolation policies: Isolate specific cloud apps

Ability to go beyond isolation based on category matching, with no need to define exceptions or create custom URL lists for custom categories.

Leverage Netskope’s Cloud App definition to create RBI policies to only isolate your risky app. User browsing is isolated only in the application domain boundaries.

5 – Disable clipboard pasting in unsanctioned apps to reduce data leakage

Disabling clipboard paste in the isolated sessions prevents users from pasting corporate information into these unsanctioned apps. This setting augments Data Protection and does not require activity detection or DLP matching.

6 – Provide Read Only access to personal webmail

Some of the most popular webmail apps are unsanctioned (personal use) apps such as: Gmail, Outlook Live (personal) or Yahoo mail. All of these are not corporate.

Admins can leverage RBI templates to configure policies for certain apps to only allow text input in the login domain. Access to the rest of the webmail app is read-only: