ZTIA-582: documents global policy for browser-rendered access apps (#21932)

Co-authored-by: Michael Borkenstein <[email protected]>
Co-authored-by: Max Phillips <[email protected]>

Author: Michael9127

src/content/docs/cloudflare-one/policies/gateway/global-policies.mdx

@@ -13,13 +13,14 @@ The following policies are sorted by [order of precedence](/cloudflare-one/polic
 
 ## Network proxy policies
 
-| Name                              | ID                                     | Criteria | Value                                                                                                                                                                                             | Action | Description                                                                                              |
-| --------------------------------- | -------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ | -------------------------------------------------------------------------------------------------------- |
-| Allow CF Network Error Logging L4 | `00000001-e4af-4b82-8f8c-c79c1d5d212e` | Hostname | `*.nel.cloudflare.com`                                                                                                                                                                            | allow  | Allows SNI domains for WARP registration.                                                                |
-| Allow CF Client                   | `00000001-8c3d-4e27-a01b-af8418000077` | Hostname | `*.cloudflareclient.com`                                                                                                                                                                          | allow  | Allows Zero Trust client.                                                                                |
-| Allow Gateway Proxy PAC           | `00000001-776e-438d-9856-987d7053762b` | Hostname | `*.cloudflare-gateway.com`                                                                                                                                                                        | allow  | Allows Gateway proxy with [PAC files](/cloudflare-one/connections/connect-devices/agentless/pac-files/). |
-| Allow Zero Trust Services         | `00000001-e1e8-421b-a0fe-895397489f28` | Hostname | `dash.teams.cloudflare.com`, `help.teams.cloudflare.com`, `blocked.teams.cloudflare.com`, `api.cloudflare.com`, `cloudflarestatus.com`, `www.cloudflarestatus.com`, and `one.dash.cloudflare.com` | allow  | Allows Cloudflare Zero Trust services.                                                                   |
-| Allow Access Apps L4              | `00000001-daa2-41e2-8a88-698af4066951` | Hostname | `*.cloudflareaccess.com`                                                                                                                                                                          | allow  | Allows [Cloudflare Access](/cloudflare-one/policies/access/) applications.                               |
+| Name                               | ID                                     | Criteria | Value                                                                                                                                                                                             | Action | Description                                                                                                                                   |
+| ---------------------------------- | -------------------------------------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ | --------------------------------------------------------------------------------------------------------------------------------------------- |
+| Allow CF Network Error Logging L4  | `00000001-e4af-4b82-8f8c-c79c1d5d212e` | Hostname | `*.nel.cloudflare.com`                                                                                                                                                                            | allow  | Allows SNI domains for WARP registration.                                                                                                     |
+| Allow CF Client                    | `00000001-8c3d-4e27-a01b-af8418000077` | Hostname | `*.cloudflareclient.com`                                                                                                                                                                          | allow  | Allows Zero Trust client.                                                                                                                     |
+| Allow Gateway Proxy PAC            | `00000001-776e-438d-9856-987d7053762b` | Hostname | `*.cloudflare-gateway.com`                                                                                                                                                                        | allow  | Allows Gateway proxy with [PAC files](/cloudflare-one/connections/connect-devices/agentless/pac-files/).                                      |
+| Allow Zero Trust Services          | `00000001-e1e8-421b-a0fe-895397489f28` | Hostname | `dash.teams.cloudflare.com`, `help.teams.cloudflare.com`, `blocked.teams.cloudflare.com`, `api.cloudflare.com`, `cloudflarestatus.com`, `www.cloudflarestatus.com`, and `one.dash.cloudflare.com` | allow  | Allows Cloudflare Zero Trust services.                                                                                                        |
+| Allow Access Apps L4               | `00000001-daa2-41e2-8a88-698af4066951` | Hostname | `*.cloudflareaccess.com`                                                                                                                                                                          | allow  | Allows [Cloudflare Access](/cloudflare-one/policies/access/) applications.                                                                    |
+| Allow Browser-rendered Access Apps | `00000001-1f93-4476-8f92-9aa4407d1c5f` | Hostname | `*.zero-trust-apps.cfdata.org`                                                                                                                                                                    | allow  | Allows Cloudflare Access terminal applications [rendered in a browser](/cloudflare-one/applications/non-http/browser-rendering/#ssh-and-vnc). |
 
 ## HTTP inspection policies