Hi Wasfi,
Based off of your description, you would need to upgrade from High Risk Isolation to a dedicated Full Web Isolation tenant. Once upgraded, with the dedicated tenant linked to your CloudSWG, you can send more than just high risk traffic to isolation. You will also gain access to the Web Isolation management interface, which will allow you to create different rules and isolation profiles (including Read-Only) for traffic that is sent to isolation.