Prisma Access Browser Administration
  • Prisma Access Browser Administration
  • Prisma Access Browser Documentation
  • All Documentation
>
Configure Prisma Access Browser Browser Customization Controls
Focus
Download PDF
Focus
  1. Home
  2. Prisma Access Browser
  3. Manage Prisma Access Browser Policy Profiles
  4. Configure Prisma Access Browser Browser Customization Controls
Download PDF
Prisma Access Browser

Configure Prisma Access Browser Browser Customization Controls

Table of Contents

Configure Prisma Access Browser Browser Customization Controls

Configure browser customization controls for Prisma Access Secure Enterprise Browser (Prisma Access Browser).
Where Can I Use This?What Do I Need?
  • Strata Cloud Manager
  • Prisma Access Browser standalone
  • Prisma Access with Prisma Access Browser bundle license or Prisma Access Browser standalone license
  • Superuser or Prisma Access Browser role
When you're creating a browser customization rule, you can configure the controls in the following ways:
  • When you're creating a new browser customization rule, you can set the controls in the Browser Customization page.
  • You can edit an existing rule.
  • When you create a policy profile, you can configure browser security to control user security settings in the Prisma Access Browser.
  • You can select it from Strata Cloud Manager ManageConfigurationPrisma Access BrowserPolicyProfilesBrowser Customization.
The following topics only display one way.

Browser Customization – Branding

Theme Color

Mobile Browser - Partial support
The Prisma Access Browser allows users to modify the browser theme color. You can choose to let users select their own favorite color if they desire. Choose a specific color from a color palette, or enter colors based on the following color codes:
  • R G B
  • H S L
  • HEX
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Theme Color.
  3. Select one of the following options:
    • Users choose their own - allows users to select their own color.
    • Custom color - allows you to set the color scheme.
  4. Set.

Brand Color

Mobile Browser - Partial support
You can select a color that will be applied according to all user-facing browser elements. This includes dialogs, block pages, and other elements.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Brand Color.
  3. Select one of the following options:
    • Default color – Prisma Access Browser will use the default color for browser elements.
    • Custom color - You can select a custom color for browser elements.
      When selecting an accessible color, You should avoid indicative colors, such as red or green.
      For more information on accessible colors, refer to WebAIM.
  4. Set.

Company Logo

Mobile Browser - Full support
The Prisma Access Browser allows you to select your own logo to increase branding awareness. The logo appears on the homepage, in messages sent to the users, and in the Browser Control Pane.
You can add a company logo, or no logo to leave the default Prisma Access Browser Logo.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Company Logo.
  3. Select one of the following options:
    • No Company Logo - The default Prisma Access Browser logo will be displayed.
    • Set Company Logo- Drag the logo image or browse for it.
      The logo image must conform to the following requirements.
      • File format - PNG or SVG only
      • Recommended width - 600 px
      • File size - up to 1 MB
      • The logo should be transparent (no background).
  4. Set.
  5. The logo will now be displayed on the homepage and all places where the logo is used.

Company Name

Mobile Browser - Full support
You can use the Company Name feature to add the organization's name to the top line of the browser.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Company Name.
  3. Select one of the following options:
    • Display no name - the display will show - Secure Browser - Powered by Palo Alto Networks.
    • Set name - Enter the name that is to be displayed on the top of the homepage. It will appear as The <company name> browser - Powered by Palo Alto Networks.
  4. Set.
  5. The name will now be displayed on the homepage and elsewhere.

Custom Texts

Mobile Browser - No support
You can modify the default texts that appear in user-facing dialogs and other pages. This can help describe additional information regarding policies - for example - why a particular policy isn't allowed, and if there is anything that can be done to allow for special permission.
This feature can also be used for localizing the information if required.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Custom Texts.
  3. Select one of the following options:
    • Use default dialog text - the dialog texts will be the default, preconfigured texts.
    • Customize and edit dialog texts - Select the dialog that you want to edit, and click the pencil icon. In the Edit Text window, edit the Title and Description. If needed, add new line characters to provide some formatting.
      There are two tabs for this option - Dialog texts and Security texts.
    • Add link - Enter the information for the Link name (up to 30 characters), and add the URL.
    • Set name - Enter the name that is to be displayed on the top of the homepage. It will appear as The <company name> browser - Powered by Palo Alto Networks.
  4. Save.
  5. Repeat and edit or customize as many additional dialogs as needed.
  6. Save when all dialogs are modified.

Browser Icon

Mobile Browser - No support
This feature is only available on macOS.
Organizations that use the Prisma Access Browser can use their own internally designed icon if they so desire. If not, you can make sure that only the default Prisma Access Browser icon is used.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Browser Icon.
  3. Select one of the following options:
    • Use Prisma Access Browser icon - The Prisma Access browser will use the default icon.
    • Set browser icon - You can select a custom icon.
  4. Set.

Browser Customization – Autonomous Digital Experience Management (ADEM)

Real User Monitoring (RUM)

This feature controls the ability to install or uninstall the ADEM plugin.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Autonomous Digital Experience Management.
  3. Select one of the following options:
    • Activate - Allow the installation of the ADEM plugin.
    • Deactivate - Allow the uninstallation of the ADEM plugin.
  4. Set.

Browser Customization – Customization

Incognito

Mobile Browser - Full support
This feature allows you to control whether or not the Prisma Access Browser can be opened in Incognito mode. A user in Incognito mode is anonymized from the Web only. Admin visibility and Browser Policies are not affected by this feature. You can set Access & Data Control rules to allow access to personal websites without logging.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Incognito.
  3. Select one of the following options:
    • Allow - Permit use of Incognito mode in Prisma Access Browser.
    • Block - Block use of Incognito mode in The Prisma Access Browser.
  4. Set.

Extension Force Install

Mobile Browser - No support
This feature allows you to configure specific extensions that are to be installed automatically in the Prisma Access Browser.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Extension Force Install.
  3. Select the Store that is the source of the extension. The options are:
    • Chrome Web Store.
    • Custom URL. Enter the URL.
  4. Select whether the extension will be pinned to the toolbar for the end users. .
  5. Select whether the extension will be automatically installed in Incognito mode.
  6. If applicable, enter the Custom Configuration.
  7. Add.

User-Agent

Mobile Browser - Full support
The User-Agent feature allows you to add additional Agent components to the default User-Agent string to identify the Prisma Access Browser HTTP/S requests.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select User-Agent .
  3. Select one of the following options:
    • Use default User-Agent - Use the default User-Agent string when identifying requests from the Prisma Access Browser. This is the same as the Chrome User-Agent
    • Set an additional User-Agent component - Configure an additional User-Agent for the Prisma Access Browser by entering the component name in the appropriate field.
    • User-Agent desktop mode - Allows you to ensure that applications that do not function properly in mobile browsers open in desktop mode.
  4. Set.

Custom HTTP Header

Mobile Browser - No support
Custom HTTP headers let the browser pass additional information along with HTTP/S requests. An HTTP header consists of its case-insensitive name followed by a colon (:), then by its value.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Custom HTTP Header.
  3. Select one of the following options:
    • Keep default header - Use the default setting, without any custom HTTP headers.
    • Add a custom header - Configure a custom HTTP header that will identify the Prisma Access Browser HTTP/S requests.
      • Custom Header Name - Add a name to identify the custom header.
      • Custom Header Value - Add a custom value for the header.
  4. Set.

Profile Sync

Mobile Browser - Partial support (iOS only)
In some organizations, employees use the Prisma Access Browser on multiple devices. This feature enables you to synchronize profiles across all Prisma Access Browser installations on different devices.
You have the option of customizing the browser settings to sync everything - all information that is associated with the user - or selecting specific information that will be included in the sync.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Profile Sync.
  3. Select one of the following options:
    • Enable- Allow a Profile Sync. You can select the following sync options:
      • Sync everything - Select all the information that can be synchronized.
      • Customize sync - Select the components that will be synchronized across multiple devices.
    • Disable - Don't perform profile sync.
  4. Set.

Default Browser

Mobile Browser - Full support
This feature allows you to control whether Prisma Access Browser will be the default browser.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Default Browser.
  3. Select one of the following options:
    • Suggest user - Suggest that users select the Prisma Access Browser.
    • Don't suggest user - don't suggest using the Prisma Access Browser.
  4. Click Set.

Onboarding Wizard

Mobile Browser - No support
This feature allows you to configure the Onboarding Wizard that is displayed to all new Prisma Access Browser users when they install the browser. The wizard assists end users in installing and configuring the Prisma Access Browser, and at the same time - displays a brief tutorial of some of the more popular features.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Onboarding Wizard.
  3. Select one of the following options:
    • Enabled - the Onboarding Wizard will be enabled for use. You will be able to select the steps that will be made available to the users.
      By default, all steps are enabled.
      1. Step 1: Welcome and language selection (Editable) allows you to select either the default welcome message or create a custom message for your users. The custom content allows 160 characters for a title and 320 characters as the message.
      2. In Step 2: Customize, users can add their picture. If you did not configure the
        Brand Color
        , users will be able to configure their own preferred color. If the Brand Color was configured, the color option won't be displayed.
      3. Step 3: Import allows users to import their existing resources including:
        • Bookmarks
        • Passwords
        • History
        • Cookies
        • Extensions installed
        • Extension Data
      4. Step 4: Labels & Policy indicator provides a brief description on how users can benefit from the displayed labels.
      5. Step 5: Popup extensions & Notifications encourages users to use the Prisma Access Browser icon to help manage their account.
      6. Step 6: Restrictions describes to users the way that Prisma Access Browser uses the restrictions in the browser.
      7. Step 7: Mobile & Sync informs users that the mobile application is a seamless extension of the desktop browser.
      8. Step 8: Feedback invites users to send their comments and suggestions.
    • Disabled - the Onboarding Wizard won't be enabled.
  4. Set.

Sidebar

Mobile Browser - No support
This feature allows you to control whether the users will be able to use the sidebar. The sidebar allows you to create shortcuts designed for end-users, so that they will be able to save time when using their regular/preferred applications. Users can also display or hide it on their own by opening the Control Pane and selecting Show Sidebar.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Default Browser.
  3. Select one of the following options:
    • Enable - the Sidebar will be enabled for use.
    • Disable - the Sidebar will be disabled from use.
  4. Set.

Safe Search

Mobile Browser - Full support
When you enable the SafeSearch feature, you extend the URL filtering to include the selected search engines. .
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select SafeSearch.
  3. Select one of the following options:
    • Enable-Enable the featrure. You also need to select at least one of the available search engines to be used for safe search.
    • Disable- Disable the feature.
  4. Set.

Microsoft Auto-SSO (Windows only)

Mobile Browser - No support
This feature enables automatic web-application user sign-in for Microsoft Entra ID accounts, based on the device signed-in account.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Microsoft Auto-SSO.
  3. Select one of the following options:
    • Enable - Enable the automatic user sign-in for Microsoft Entra accounts.
    • Disable - Disable the Microsoft auto-sso feature.
    It is strongly recommended that this feature be limited to managed devices only.
  4. Click Set.

Browser Customization – Routing

Proxy Auto-Configuration File

Mobile Browser - No support
This feature allows you to configure the Prisma Access Browser to use a Proxy Auto-Configuration (PAC) file to pass some of the web traffic through a proxy or gateway. This feature overrides the system PAC file.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Proxy Auto-Configuration File.
  3. Select one of the following options:
    • Set PAC File - Configure the Prisma Access Browser to use a PAC file.
    • No PAC File - Do not require a PAC file.
  4. Set.

Traffic Flow

Mobile Browser - Partial support
The Traffic Flow control allows you to manage the way that the Prisma Access Browser handles network traffic.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Traffic Flow.
  3. Select one of the following options:
    • Only route private application traffic through Prisma Access.
    • Route all traffic through Prisma Access.
      Mobile Devices: To ensure an optimal experience with Network Detection and Prisma Access, either route only Private App traffic, or exclude the Mobile Device group from routing.
    • Do not route traffic through Prisma Access
  4. Set.

Internal Network Detection

Mobile Browser - No support
This feature allows you to configure internal network detection to ensure that traffic is routed in an optimal way
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Internal Network Detection.
  3. Click Add Extension.
  4. Select one of the following options:
    • Enable - Enable Internal Network Detection. Select and configure the methods.
      • Internal Host Detection - Identify the internal network by establishing a connection with a host that is only available inside the network. Enter the following information:
        • FQDN to resolve
        • Expected IP addresses
      • Agent detection - Identify the internal network by detecting whether the Global Protect or the Prisma Access agent is running on the device.
    • Disable - Disable Internal Network Detection.
  5. Click Set.

Browser Customization – New Tab and Home Page

New Tab Page

Mobile Browser - Full support
This feature allows you to set the type of page that is displayed whenever a user opens the Prisma Access Browser or a new tab. This will help you create a unified look and feel across company resources.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select New Tab Page.
  3. Select one of the following options:
    • Prisma Access Browser New Tab - Use the default page that is included with the browser when it installs.
    • Custom URL- Enter the URL of the selected new tab in the format
      https://www.example.com.
  4. Click Set.

Home Page

Mobile Browser - Full support
This feature allows you to set a default homepage for the browser. This page will appear whenever a user opens the Prisma Access Browser home page. This will help you create a unified look and feel across company resources.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Home Page.
  3. Select one of the following options:
    • Configured by user - Allow the users to select their own home page.
    • Prisma Access Browser Home Page - Use the default homepage that is included with the browser when it installs.
    • Custom URL- Enter the URL of the selected homepage in the format
      https://www.example.com.
  4. Optionally, select the option to Show home button on toolbar.
  5. ~Click Set.

Managed Shortcuts

Mobile Browser - Full support
To improve the efficiency for the users, the Prisma Access Browser allows you to configure applications and URLs that will appear on the homepage. In most cases, these will be applications that will be the ones most commonly needed by users in their day-to-day routine. You have the ability to enter a specific URL, a name, and a customized icon, if desired.
These links will also appear on the browser bookmark under Company Shortcuts, as well as on the desktop browser's sidebar.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Managed Shortcuts.
  3. Select one of the following options:
    • No Shortcuts - Do not include any managed shortcuts on the homepage.
    • Set Shortcuts - Click Add shortcut to add managed shortcuts to the homepage.
      1. Enter the URL.
      2. Enter a Name for the shortcut.
      3. Optionally select an icon for the shortcut. If no icon is selected, the website’s Favicon will be used.
  4. Set.

Background Image

Mobile Browser - Full support
This feature allows you to select a custom background image for the Prisma Access Browser homepage.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Background Image.
  3. Select one of the following options:
    • Default background - Use the default background image that is included with the browser when it installs.
    • Dark background - Use a dark background image.
    • Light background - Use a light background image.
  4. If you do not want to use a background image, select No Background Image.
  5. Set Background image- Drag and Drop the Enter the URL of the selected homepage in the format.
    1. Select a file to use as the background image. The image should best conform to the following guidelines:
      • File format - PNG or JPEG.
      • Image size 2560 px wide x 1440 px height.
      • Maximum file size - 3 MB
  6. If you want to see how the Background image will be displayed on different devices, click the appropriate device in the Image preview section..
  7. You can either use the default filter option, or select a custom filter.
  8. Select the checkbox if you want to use the Color White Logo option. This will make the logo stand out on the homepage.
  9. Set.

Admin Messages

Mobile Browser - No support
In many organizations, there is a challenge getting a message to all employees. The Prisma Access Browser offers a system for displaying messages on the homepage. The messages are displayed in a carousel - type display.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Admin Messages.
  3. Select one of the following options:
    • No admin messages - Do not display admin messages.
    • Set admin message- Click Add Admin Message and enter the following information:
      • Select a Title for the message.
      • Enter the Message text. The message size is limited to 1000 characters, and can also include links.
      • Click Add.
  4. On the main page, select Set. The message will be displayed on the homepage.

Custom Notice

Mobile Browser - Full support
Only Prisma Access Mobile Browser supports this feature.
Similar to Admin messages, this control allows you to send a message to all users who are using the Prisma Access Mobile Browser.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select Custom Notice.
  3. Select one of the following options:
    • Show notice - Display a custom notice for Prisma Access Mobile Browser users.
      • Select the frequency of the notice, ranging from Only once to Every 30 days. The default is Every 7 days.
        Note: If you uninstall and reinstall the browser, the frequency count restarts.
      • Enter a Title for the message.
      • Enter a Description for the message. The message is limited to 360 characters.
    • Don’t Show Notice - Do not display a custom message to Prisma Access Mobile Browser users.
    • Set admin message- Click Add Admin Message and enter the following information:
  4. Set.

Browser Customization – Upgrade Management

Deployment Upgrade

Mobile Browser - No support
In the ever-changing world of cybersecurity, it is essential that the Prisma Access Browser be kept up to date, as updates and upgrades are added regularly. Upgrades are released weekly.
Some organizations manage their upgrades using offline installers. For more information, please see The Prisma Access Browser Offline MSI Installer.
When an update is available, a button will be displayed on the browser. A user can click the button or restart the browser to update the Prisma Access Browser. You can configure a Grace Period to allow end users some time to finish a task before running an upgrade. See below for more information.
  • You can select the version to be installed by configuring the registry key (Windows).
  • There is no option to downgrade the browser.
  • Customers using offline installers won't be affected by this control.
  1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
  2. Select .
    Deployment Upgrade
  3. Select one of the following options:
    • Default channel - The browser will be upgraded to the latest version when it is available. This is the default behavior.
      • Delay options - You can decide to delay the actual deployment for up to 7 days. This is based on the settings for the flag. Contact Support for more information.
    • Long-term Support channel - This channel allows you to keep your users on a major release, but receive weekly security patches without new features. The new features will be available to your users in the next LTS major update. Bug fixes and security updates will be available on a weekly basis. You also have the ability to delay these patches.
      • Delay options - You can choose to delay the next major version for up to one month. If you select this deployment option, you will not get any bug fixes or security patches that are normally released on a weekly basis.
      • Security and Bug patches - You can choose to delay the deployment of the security and bug patches for up to 3 days. In the rare case when there is an exploit-in-the-wild, you can click Expedite critical security updates, and the delay will be ignored.
    • Pinned version - The browser will upgrade to the selected version. You can select a pinned version for Windows, and a version for macOS. You decide which versions become the pinned version.
      When the pinned version reaches its end-of-life (usually after one month), the pinned version will be reset to a version released within the past 7 days.
    • No auto-updates - As the administrator, you will be responsible for managing the upgrade deployments manually. There will be no automatic updates.
      If you select this option, your environment might be exposed to security vulnerabilities and compatibility issues.
  4. Update grace period - Allow your users to defer the forced upgrade relaunch by the selected amount of time.
  5. Click Set.

Technical Documentation

Company

Legal Notices

© 2025 Palo Alto Networks, Inc. All rights reserved.