Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. Zscaler Internet Access (ZIA)
  3. API Docs
  4. BrowserControlPolicy
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia

zia.BrowserControlPolicy

Explore with Pulumi AI

zia logo
Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
zscaler/pulumi-zia
    Deprecated: zia.index/browsercontrolpolicy.BrowserControlPolicy has been deprecated in favor of zia.index/browsercontrolsettings.BrowserControlSettings

    The zia_browser_control_policy resource allows you to update the malware protection policy configuration details. To learn more see Configuring the Browser Control Policy

    Example Usage

    resource "zia_browser_control_policy" "this" {
    plugin_check_frequency = "DAILY"
    bypass_plugins = ["ACROBAT", "FLASH", "SHOCKWAVE"]
    bypass_applications = ["OUTLOOKEXP", "MSOFFICE"]
    blocked_internet_explorer_versions = ["IE10", "MSE81", "MSE92"]
    blocked_chrome_versions = ["CH143", "CH142"]
    blocked_firefox_versions = ["MF145", "MF144"]
    blocked_safari_versions = ["AS19", "AS18"]
    blocked_opera_versions = ["O129X", "O130X"]
    bypass_all_browsers = true
    allow_all_browsers = true
    enable_warnings = true
}

    Enable Smart Isolation

    data "zia_cloud_browser_isolation_profile" "this" {
    name = "ZS_CBI_Profile1"
}

resource "zia_browser_control_policy" "this" {
    plugin_check_frequency = "DAILY"
    bypass_plugins = ["ACROBAT", "FLASH", "SHOCKWAVE"]
    bypass_applications = ["OUTLOOKEXP", "MSOFFICE"]
    blocked_internet_explorer_versions = ["IE10", "MSE81", "MSE92"]
    blocked_chrome_versions = ["CH143", "CH142"]
    blocked_firefox_versions = ["MF145", "MF144"]
    blocked_safari_versions = ["AS19", "AS18"]
    blocked_opera_versions = ["O129X", "O130X"]
    bypass_all_browsers = true
    allow_all_browsers = true
    enable_warnings = true
    enable_smart_browser_isolation = true
    smart_isolation_profile {
      id = data.zia_cloud_browser_isolation_profile.this.id
    }
}

    Create BrowserControlPolicy Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new BrowserControlPolicy(name: string, args?: BrowserControlPolicyArgs, opts?: CustomResourceOptions);
    @overload
def BrowserControlPolicy(resource_name: str,
                         args: Optional[BrowserControlPolicyArgs] = None,
                         opts: Optional[ResourceOptions] = None)

@overload
def BrowserControlPolicy(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         allow_all_browsers: Optional[bool] = None,
                         blocked_chrome_versions: Optional[Sequence[str]] = None,
                         blocked_firefox_versions: Optional[Sequence[str]] = None,
                         blocked_internet_explorer_versions: Optional[Sequence[str]] = None,
                         blocked_opera_versions: Optional[Sequence[str]] = None,
                         blocked_safari_versions: Optional[Sequence[str]] = None,
                         bypass_all_browsers: Optional[bool] = None,
                         bypass_applications: Optional[Sequence[str]] = None,
                         bypass_plugins: Optional[Sequence[str]] = None,
                         enable_smart_browser_isolation: Optional[bool] = None,
                         enable_warnings: Optional[bool] = None,
                         plugin_check_frequency: Optional[str] = None,
                         smart_isolation_groups: Optional[BrowserControlPolicySmartIsolationGroupsArgs] = None,
                         smart_isolation_profiles: Optional[Sequence[BrowserControlPolicySmartIsolationProfileArgs]] = None,
                         smart_isolation_users: Optional[BrowserControlPolicySmartIsolationUsersArgs] = None)
    func NewBrowserControlPolicy(ctx *Context, name string, args *BrowserControlPolicyArgs, opts ...ResourceOption) (*BrowserControlPolicy, error)
    public BrowserControlPolicy(string name, BrowserControlPolicyArgs? args = null, CustomResourceOptions? opts = null)
    public BrowserControlPolicy(String name, BrowserControlPolicyArgs args)
public BrowserControlPolicy(String name, BrowserControlPolicyArgs args, CustomResourceOptions options)

    type: zia:BrowserControlPolicy
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args BrowserControlPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args BrowserControlPolicyArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args BrowserControlPolicyArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args BrowserControlPolicyArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args BrowserControlPolicyArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    BrowserControlPolicy Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The BrowserControlPolicy resource accepts the following input properties:

    AllowAllBrowsers bool
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    BlockedChromeVersions List<string>
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    BlockedFirefoxVersions List<string>
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    BlockedInternetExplorerVersions List<string>
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    BlockedOperaVersions List<string>
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    BlockedSafariVersions List<string>
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    BypassAllBrowsers bool
    If set to true, all the browsers are bypassed for warnings
    BypassApplications List<string>
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    BypassPlugins List<string>
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    EnableSmartBrowserIsolation bool
    A Boolean value that specifies if Smart Browser Isolation is enabled
    EnableWarnings bool
    A Boolean value that specifies if the warnings are enabled
    PluginCheckFrequency string
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    SmartIsolationGroups zscaler.PulumiPackage.Zia.Inputs.BrowserControlPolicySmartIsolationGroups
    Name-ID pairs of groups for which the rule is applied
    SmartIsolationProfiles List<zscaler.PulumiPackage.Zia.Inputs.BrowserControlPolicySmartIsolationProfile>
    The isolation profile
    SmartIsolationUsers zscaler.PulumiPackage.Zia.Inputs.BrowserControlPolicySmartIsolationUsers
    Name-ID pairs of users for which the rule is applied
    AllowAllBrowsers bool
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    BlockedChromeVersions []string
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    BlockedFirefoxVersions []string
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    BlockedInternetExplorerVersions []string
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    BlockedOperaVersions []string
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    BlockedSafariVersions []string
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    BypassAllBrowsers bool
    If set to true, all the browsers are bypassed for warnings
    BypassApplications []string
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    BypassPlugins []string
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    EnableSmartBrowserIsolation bool
    A Boolean value that specifies if Smart Browser Isolation is enabled
    EnableWarnings bool
    A Boolean value that specifies if the warnings are enabled
    PluginCheckFrequency string
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    SmartIsolationGroups BrowserControlPolicySmartIsolationGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    SmartIsolationProfiles []BrowserControlPolicySmartIsolationProfileArgs
    The isolation profile
    SmartIsolationUsers BrowserControlPolicySmartIsolationUsersArgs
    Name-ID pairs of users for which the rule is applied
    allowAllBrowsers Boolean
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blockedChromeVersions List<String>
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blockedFirefoxVersions List<String>
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blockedInternetExplorerVersions List<String>
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blockedOperaVersions List<String>
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blockedSafariVersions List<String>
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypassAllBrowsers Boolean
    If set to true, all the browsers are bypassed for warnings
    bypassApplications List<String>
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypassPlugins List<String>
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enableSmartBrowserIsolation Boolean
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enableWarnings Boolean
    A Boolean value that specifies if the warnings are enabled
    pluginCheckFrequency String
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smartIsolationGroups BrowserControlPolicySmartIsolationGroups
    Name-ID pairs of groups for which the rule is applied
    smartIsolationProfiles List<BrowserControlPolicySmartIsolationProfile>
    The isolation profile
    smartIsolationUsers BrowserControlPolicySmartIsolationUsers
    Name-ID pairs of users for which the rule is applied
    allowAllBrowsers boolean
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blockedChromeVersions string[]
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blockedFirefoxVersions string[]
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blockedInternetExplorerVersions string[]
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blockedOperaVersions string[]
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blockedSafariVersions string[]
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypassAllBrowsers boolean
    If set to true, all the browsers are bypassed for warnings
    bypassApplications string[]
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypassPlugins string[]
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enableSmartBrowserIsolation boolean
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enableWarnings boolean
    A Boolean value that specifies if the warnings are enabled
    pluginCheckFrequency string
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smartIsolationGroups BrowserControlPolicySmartIsolationGroups
    Name-ID pairs of groups for which the rule is applied
    smartIsolationProfiles BrowserControlPolicySmartIsolationProfile[]
    The isolation profile
    smartIsolationUsers BrowserControlPolicySmartIsolationUsers
    Name-ID pairs of users for which the rule is applied
    allow_all_browsers bool
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blocked_chrome_versions Sequence[str]
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blocked_firefox_versions Sequence[str]
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blocked_internet_explorer_versions Sequence[str]
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blocked_opera_versions Sequence[str]
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blocked_safari_versions Sequence[str]
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypass_all_browsers bool
    If set to true, all the browsers are bypassed for warnings
    bypass_applications Sequence[str]
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypass_plugins Sequence[str]
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enable_smart_browser_isolation bool
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enable_warnings bool
    A Boolean value that specifies if the warnings are enabled
    plugin_check_frequency str
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smart_isolation_groups BrowserControlPolicySmartIsolationGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    smart_isolation_profiles Sequence[BrowserControlPolicySmartIsolationProfileArgs]
    The isolation profile
    smart_isolation_users BrowserControlPolicySmartIsolationUsersArgs
    Name-ID pairs of users for which the rule is applied
    allowAllBrowsers Boolean
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blockedChromeVersions List<String>
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blockedFirefoxVersions List<String>
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blockedInternetExplorerVersions List<String>
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blockedOperaVersions List<String>
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blockedSafariVersions List<String>
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypassAllBrowsers Boolean
    If set to true, all the browsers are bypassed for warnings
    bypassApplications List<String>
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypassPlugins List<String>
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enableSmartBrowserIsolation Boolean
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enableWarnings Boolean
    A Boolean value that specifies if the warnings are enabled
    pluginCheckFrequency String
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smartIsolationGroups Property Map
    Name-ID pairs of groups for which the rule is applied
    smartIsolationProfiles List<Property Map>
    The isolation profile
    smartIsolationUsers Property Map
    Name-ID pairs of users for which the rule is applied

    Outputs

    All input properties are implicitly available as output properties. Additionally, the BrowserControlPolicy resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing BrowserControlPolicy Resource

    Get an existing BrowserControlPolicy resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: BrowserControlPolicyState, opts?: CustomResourceOptions): BrowserControlPolicy
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        allow_all_browsers: Optional[bool] = None,
        blocked_chrome_versions: Optional[Sequence[str]] = None,
        blocked_firefox_versions: Optional[Sequence[str]] = None,
        blocked_internet_explorer_versions: Optional[Sequence[str]] = None,
        blocked_opera_versions: Optional[Sequence[str]] = None,
        blocked_safari_versions: Optional[Sequence[str]] = None,
        bypass_all_browsers: Optional[bool] = None,
        bypass_applications: Optional[Sequence[str]] = None,
        bypass_plugins: Optional[Sequence[str]] = None,
        enable_smart_browser_isolation: Optional[bool] = None,
        enable_warnings: Optional[bool] = None,
        plugin_check_frequency: Optional[str] = None,
        smart_isolation_groups: Optional[BrowserControlPolicySmartIsolationGroupsArgs] = None,
        smart_isolation_profiles: Optional[Sequence[BrowserControlPolicySmartIsolationProfileArgs]] = None,
        smart_isolation_users: Optional[BrowserControlPolicySmartIsolationUsersArgs] = None) -> BrowserControlPolicy
    func GetBrowserControlPolicy(ctx *Context, name string, id IDInput, state *BrowserControlPolicyState, opts ...ResourceOption) (*BrowserControlPolicy, error)
    public static BrowserControlPolicy Get(string name, Input<string> id, BrowserControlPolicyState? state, CustomResourceOptions? opts = null)
    public static BrowserControlPolicy get(String name, Output<String> id, BrowserControlPolicyState state, CustomResourceOptions options)
    resources:  _:    type: zia:BrowserControlPolicy    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AllowAllBrowsers bool
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    BlockedChromeVersions List<string>
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    BlockedFirefoxVersions List<string>
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    BlockedInternetExplorerVersions List<string>
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    BlockedOperaVersions List<string>
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    BlockedSafariVersions List<string>
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    BypassAllBrowsers bool
    If set to true, all the browsers are bypassed for warnings
    BypassApplications List<string>
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    BypassPlugins List<string>
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    EnableSmartBrowserIsolation bool
    A Boolean value that specifies if Smart Browser Isolation is enabled
    EnableWarnings bool
    A Boolean value that specifies if the warnings are enabled
    PluginCheckFrequency string
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    SmartIsolationGroups zscaler.PulumiPackage.Zia.Inputs.BrowserControlPolicySmartIsolationGroups
    Name-ID pairs of groups for which the rule is applied
    SmartIsolationProfiles List<zscaler.PulumiPackage.Zia.Inputs.BrowserControlPolicySmartIsolationProfile>
    The isolation profile
    SmartIsolationUsers zscaler.PulumiPackage.Zia.Inputs.BrowserControlPolicySmartIsolationUsers
    Name-ID pairs of users for which the rule is applied
    AllowAllBrowsers bool
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    BlockedChromeVersions []string
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    BlockedFirefoxVersions []string
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    BlockedInternetExplorerVersions []string
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    BlockedOperaVersions []string
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    BlockedSafariVersions []string
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    BypassAllBrowsers bool
    If set to true, all the browsers are bypassed for warnings
    BypassApplications []string
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    BypassPlugins []string
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    EnableSmartBrowserIsolation bool
    A Boolean value that specifies if Smart Browser Isolation is enabled
    EnableWarnings bool
    A Boolean value that specifies if the warnings are enabled
    PluginCheckFrequency string
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    SmartIsolationGroups BrowserControlPolicySmartIsolationGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    SmartIsolationProfiles []BrowserControlPolicySmartIsolationProfileArgs
    The isolation profile
    SmartIsolationUsers BrowserControlPolicySmartIsolationUsersArgs
    Name-ID pairs of users for which the rule is applied
    allowAllBrowsers Boolean
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blockedChromeVersions List<String>
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blockedFirefoxVersions List<String>
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blockedInternetExplorerVersions List<String>
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blockedOperaVersions List<String>
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blockedSafariVersions List<String>
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypassAllBrowsers Boolean
    If set to true, all the browsers are bypassed for warnings
    bypassApplications List<String>
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypassPlugins List<String>
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enableSmartBrowserIsolation Boolean
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enableWarnings Boolean
    A Boolean value that specifies if the warnings are enabled
    pluginCheckFrequency String
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smartIsolationGroups BrowserControlPolicySmartIsolationGroups
    Name-ID pairs of groups for which the rule is applied
    smartIsolationProfiles List<BrowserControlPolicySmartIsolationProfile>
    The isolation profile
    smartIsolationUsers BrowserControlPolicySmartIsolationUsers
    Name-ID pairs of users for which the rule is applied
    allowAllBrowsers boolean
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blockedChromeVersions string[]
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blockedFirefoxVersions string[]
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blockedInternetExplorerVersions string[]
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blockedOperaVersions string[]
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blockedSafariVersions string[]
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypassAllBrowsers boolean
    If set to true, all the browsers are bypassed for warnings
    bypassApplications string[]
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypassPlugins string[]
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enableSmartBrowserIsolation boolean
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enableWarnings boolean
    A Boolean value that specifies if the warnings are enabled
    pluginCheckFrequency string
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smartIsolationGroups BrowserControlPolicySmartIsolationGroups
    Name-ID pairs of groups for which the rule is applied
    smartIsolationProfiles BrowserControlPolicySmartIsolationProfile[]
    The isolation profile
    smartIsolationUsers BrowserControlPolicySmartIsolationUsers
    Name-ID pairs of users for which the rule is applied
    allow_all_browsers bool
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blocked_chrome_versions Sequence[str]
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blocked_firefox_versions Sequence[str]
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blocked_internet_explorer_versions Sequence[str]
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blocked_opera_versions Sequence[str]
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blocked_safari_versions Sequence[str]
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypass_all_browsers bool
    If set to true, all the browsers are bypassed for warnings
    bypass_applications Sequence[str]
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypass_plugins Sequence[str]
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enable_smart_browser_isolation bool
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enable_warnings bool
    A Boolean value that specifies if the warnings are enabled
    plugin_check_frequency str
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smart_isolation_groups BrowserControlPolicySmartIsolationGroupsArgs
    Name-ID pairs of groups for which the rule is applied
    smart_isolation_profiles Sequence[BrowserControlPolicySmartIsolationProfileArgs]
    The isolation profile
    smart_isolation_users BrowserControlPolicySmartIsolationUsersArgs
    Name-ID pairs of users for which the rule is applied
    allowAllBrowsers Boolean
    A Boolean value that specifies whether or not to allow all the browsers and their respective versions access to the internet
    blockedChromeVersions List<String>
    Versions of Google Chrome browser that need to be blocked. If not set, all Google Chrome versions are allowed.
    blockedFirefoxVersions List<String>
    Versions of Mozilla Firefox browser that need to be blocked. If not set, all Mozilla Firefox versions are allowed.
    blockedInternetExplorerVersions List<String>
    Versions of Microsoft browser that need to be blocked. If not set, all Microsoft browser versions are allowed.
    blockedOperaVersions List<String>
    Versions of Opera browser that need to be blocked. If not set, all Opera versions are allowed
    blockedSafariVersions List<String>
    Versions of Apple Safari browser that need to be blocked. If not set, all Apple Safari versions are allowed
    bypassAllBrowsers Boolean
    If set to true, all the browsers are bypassed for warnings
    bypassApplications List<String>
    List of applications that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable applications are warned
    bypassPlugins List<String>
    List of plugins that need to be bypassed for warnings. This attribute has effect only if the 'enableWarnings' attribute is set to true. If not set, all vulnerable plugins are warned
    enableSmartBrowserIsolation Boolean
    A Boolean value that specifies if Smart Browser Isolation is enabled
    enableWarnings Boolean
    A Boolean value that specifies if the warnings are enabled
    pluginCheckFrequency String
    Specifies how frequently the service checks browsers and relevant applications to warn users regarding outdated or vulnerable browsers, plugins, and applications. If not set, the warnings are disabled
    smartIsolationGroups Property Map
    Name-ID pairs of groups for which the rule is applied
    smartIsolationProfiles List<Property Map>
    The isolation profile
    smartIsolationUsers Property Map
    Name-ID pairs of users for which the rule is applied

    Supporting Types

    BrowserControlPolicySmartIsolationGroups, BrowserControlPolicySmartIsolationGroupsArgs

    Ids List<int>
    A unique identifier for an entity.
    Ids []int
    A unique identifier for an entity.
    ids List<Integer>
    A unique identifier for an entity.
    ids number[]
    A unique identifier for an entity.
    ids Sequence[int]
    A unique identifier for an entity.
    ids List<Number>
    A unique identifier for an entity.

    BrowserControlPolicySmartIsolationProfile, BrowserControlPolicySmartIsolationProfileArgs

    Id string
    The universally unique identifier (UUID) for the browser isolation profile
    Id string
    The universally unique identifier (UUID) for the browser isolation profile
    id String
    The universally unique identifier (UUID) for the browser isolation profile
    id string
    The universally unique identifier (UUID) for the browser isolation profile
    id str
    The universally unique identifier (UUID) for the browser isolation profile
    id String
    The universally unique identifier (UUID) for the browser isolation profile

    BrowserControlPolicySmartIsolationUsers, BrowserControlPolicySmartIsolationUsersArgs

    Ids List<int>
    A unique identifier for an entity.
    Ids []int
    A unique identifier for an entity.
    ids List<Integer>
    A unique identifier for an entity.
    ids number[]
    A unique identifier for an entity.
    ids Sequence[int]
    A unique identifier for an entity.
    ids List<Number>
    A unique identifier for an entity.

    Import

    Zscaler offers a dedicated tool called Zscaler-Terraformer to allow the automated import of ZIA configurations into Terraform-compliant HashiCorp Configuration Language.

    Visit

    zia_browser_control_policy can be imported by using browser_settings as the import ID.

    For example:

    $ pulumi import zia:index/browserControlPolicy:BrowserControlPolicy this "browser_settings"

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    zia zscaler/pulumi-zia
    License
    MIT
    Notes
    This Pulumi package is based on the zia Terraform Provider.
    zia logo
    Zscaler Internet Access v1.1.1 published on Tuesday, Jun 24, 2025 by Zscaler
    zscaler/pulumi-zia