[9.0] Adds documentation of baseline screenshotting network policy to disallow external (elastic#233522) (elastic#233524)

# Backport

This will backport the following commits from `main` to `9.0`:
- [Adds documentation of baseline screenshotting network policy to
disallow external
(elastic#233522)](elastic#233522)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT [{"author":{"name":"Jeramy
Soucy","email":"[email protected]"},"sourceCommit":{"committedDate":"2025-08-29T18:54:47Z","message":"Adds
documentation of baseline screenshotting network policy to disallow
external (elastic#233522)\n\n## Summary\n\nAdds an example of a baseline
screenshotting network policy to\ndisallowing all requests to external
paths.","sha":"56de08dc0a100dcfb7e5b850ab7558946514c727","branchLabelMapping":{"^v9.2.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["Team:Security","release_note:skip","v9.0.0","docs","backport:version","v9.1.0","v9.2.0"],"title":"Adds
documentation of baseline screenshotting network policy to disallow
external","number":233522,"url":"https://github.com/elastic/kibana/pull/233522","mergeCommit":{"message":"Adds
documentation of baseline screenshotting network policy to disallow
external (elastic#233522)\n\n## Summary\n\nAdds an example of a baseline
screenshotting network policy to\ndisallowing all requests to external
paths.","sha":"56de08dc0a100dcfb7e5b850ab7558946514c727"}},"sourceBranch":"main","suggestedTargetBranches":["9.0","9.1"],"targetPullRequestStates":[{"branch":"9.0","label":"v9.0.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"9.1","label":"v9.1.0","branchLabelMappingKey":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v9.2.0","branchLabelMappingKey":"^v9.2.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/233522","number":233522,"mergeCommit":{"message":"Adds
documentation of baseline screenshotting network policy to disallow
external (elastic#233522)\n\n## Summary\n\nAdds an example of a baseline
screenshotting network policy to\ndisallowing all requests to external
paths.","sha":"56de08dc0a100dcfb7e5b850ab7558946514c727"}}]}]
BACKPORT-->

Co-authored-by: Jeramy Soucy <[email protected]>

Author: kibanamachine

docs/reference/configuration-reference/reporting-settings.md

@@ -196,6 +196,15 @@ xpack.screenshotting.networkPolicy:
   rules: [ { allow: true, host: "placeholder.com", protocol: "https:" } ]
 ```
 
+Example of a baseline configuration for disallowing all requests to external paths:
+```yaml
+xpack.screenshotting.networkPolicy:
+  rules: [ { allow: true, host: "localhost:5601", protocol: "http:" } ]
+```
+::::{note}
+Typically, Chromium will connect to {{kib}} on a local interface, but this may be different based on the environment and specific [headless browser connection settings](#reporting-kibana-server-settings).
+::::
+
 A final `allow` rule with no host or protocol allows all requests that are not explicitly denied:
 
 ```yaml