Non-identity on-ramps

With Cloudflare Zero Trust, you can isolate HTTP traffic from on-ramps such as proxy endpoints or Magic WAN. Since these on-ramps do not require users to log in to Cloudflare WARP, identity-based policies are not supported.

​​ Set up non-identity browser isolation

1. Install the Cloudflare certificate on your devices.
2. Connect your infrastructure to Gateway using one of the following on-ramps:
   • Configure your browser to forward traffic to a Gateway proxy endpoint with PAC files.
   • Connect your enterprise site router to Gateway with the Anycast GRE or IPsec tunnel on-ramp to Magic WAN.
3. Enable non-identity browser isolation:
   1. In Zero Trust Open external link , go to Settings > Browser Isolation.
   2. Turn on Non-identity on-ramp support.
4. Build a non-identity HTTP policy to isolate websites in a remote browser.