Quick Start: RBI

Setting up a basic Remote Browser Isolation record for protecting web-based applications

What is Remote Browser Isolation

KeeperPAM remote browser records ensure safe access to internal and cloud apps via a protected browser inside the vault. This browser is shown from the Keeper Gateway to the Keeper Vault, isolating the session for zero-trust access.

This quick guide extends the sandbox that you created in the Quick Start Wizard to add a remote browser isolation resource in the vault.

1

Download SecComp File

Download this file called docker-seccomp.json and place it in the same folder as your Docker Compose file.

15KB

docker-seccomp.json

2

Update Docker Compose

Modify the docker-compose.yml file to add the security_opt section as seen below:

  keeper-gateway:
    platform: linux/amd64
    image: keeper/gateway:preview
    shm_size: 2g
    security_opt:
      - "seccomp:docker-seccomp.json"

3

Restart Docker

After restarting the Docker containers, you can now use RBI.

4

Add a PAM Browser Record

• From the Vault Preview, click on a folder containing your PAM Resource records.

• Click Create New > Connection

• Enter a Title such as "Google Browsing"

• Select Target type of "Browser"

• Click Next

5

Finish record creation

• Set the URL to the starting page (e.g. https://google.com)

• Click Set Up

• Select the PAM Configuration

• Select "Allow navigation..." to allow navigation beyond the starting page.

• Scroll down and click Update

• Click Save on the record

• Click Launch to initiate a session

Screenshots

Below are screenshots of the Remote Browser Isolation setup from start to finish.

Create a Connection

Select Browser Target

Edit the PAM Settings to enable RBI

Update the PAM settings

Remote Browser Isolation Record View

Connecting to a web application