Which field within a URL filtering rule must be defined for Browser Isolation to work?

URL Filtering can send traffic to Browser Isolation only when the policy can determine that the user's browser is supported for isolation handling. The User Agent field provides that browser and client context, so it must be defined for Browser Isolation behavior to work correctly in the URL Filtering rule. Option B (User Agent) is correct because User Agent is the required field for applying the isolation action.

Why the other options are incorrect:

A. Groups: Groups target which users the URL rule applies to. Browser Isolation still needs User Agent so Zscaler can determine browser support/handling.

C. Departments: Departments are user attributes for rule targeting. They do not tell Zscaler whether the browser session can be isolated.

D. Device Trust: Device Trust is a posture/context signal. Browser Isolation depends on User Agent information for browser-specific handling.