Deploy

Prisma Access Browser

Using Self-Service Methods

Direct users to the link
https://get.pabrowser.com
to proceed with browser installation.
Users will need to log in with their SSO credentials (after the administrator configures SSO).
For more information and getting started for end users, see the User Guide.

Deploy

Prisma Access Browser

Using Offline MSI Installer

Monitor the various support links and RSS feeds to monitor when updates are available.
Check them on your testing environment and when you're confident with the update, you can push the update to your users.
The offline MSI Installer is available at: https://updates.talon-sec.com/sparkle/PAB/offline-win/2804.5/stable_prisma_access_browser_installer_125_142_2804_5-sEL3FStyfY.msi

Deploy

Prisma Access Browser

Using Jamf

Open the Jamf Dashboard and select
Settings
.
Select
Computer Management
Scripts
.
On the Scripts page, select
New
.
On the New Script page, on the General tab, enter the
Display Name
- a name for the script. Use any name that meets your organizational requirements.
Select the
Script
tab.
Install the Installomator script.
Locate the line:
DEBUG=1
, and change it to:
DEBUG=0
.
.
Locate the label:
prism9
. Enter the following script
before
this label:
pabrowser)
                                            name="Prisma Access Browser"
                                            type="dmg"
                                            if [[ $(arch) != "i386" ]]; then
                                            printlog "Architecture: arm64 (not i386)"
                                            downloadURL=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable-a64/appcast.xml | grep -Eo 'url="(.*)"' | cut -d '"' -f2 | tail -n1)
                                            appNewVersion=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable-a64/appcast.xml | grep -Eo 'sparkle:shortVersionString="(.*)"' | cut -d '"' -f2 | tail -n1)
                                            else
                                            printlog "Architecture: i386"
                                            downloadURL=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable/appcast.xml | grep -Eo 'url="(.*)"' | cut -d '"' -f2 | tail -n1)
                                            appNewVersion=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable/appcast.xml | grep -Eo 'sparkle:shortVersionString="(.*)"' | cut -d '"' -f2 | tail -n1)
                                            fi
                                            expectedTeamID="XZMH593AYG"
                                            ;;
.
Click the
Options
tab. Under
Parameter 4
, enter the Application name. Select
Save
.
The script is saved; you can now create a new Policy.
Create the Policy.
In the Jamf Dashboard, select
Computers
Policies
New
.
On the Policies page, select
New
.
On the
New Policy
page, enter the
Display Name
for the policy.
Select
Scripts
.
In the Configure Scripts field, click
Configure
.
On the
New Policy
page, select the
Script
and click
Add
.
In the
Parameter Values
section, select the
Application Name
field, and enter
pabrowser
.
Save
.
The Script is added to the policy.

Deploy

Prisma Access Browser

Using Intune

Open the
Microsoft Intune Admin Center
.
Select
Apps
All apps
.
Click
+ Add
.
In the Select app type window, select
Line-of-business app
.
Click
Select
.
In the App information step, click
Select app package file
.
In the App package file window, browse to the MSI installation file, named
PrismaAccessBrowserSetup.msi
.
Click
Ok
.
Enter all the needed properties.
Enter a
name
for the app. This will be visible in the Intune list and in the Company Portal.
Provide a brief description of the app and its benefits for users. This description will be available in the Company Portal, where you can use rich text formatting to enhance it.
Enter the name of the app’s
publisher
, which appears in the Company Portal.
App install context
– Select the Device.
Show this as a featured app in the Company Portal
– we recommend that you select Yes so that it will be easier for your users to find.
Select the appropriate
Logo
for the application. Contact support for the correct file.
Click
Next
.
Select the Assignments for this app.
For Available for enrolled devices, select Add group, and select the required Entra groups assigned to the application.
If you select Add all users, then the Entra assignment will include all Entra users in your organization.
Click
Next
.
Review all the settings and click
Create
to create the new app, or
Previous
to make changes.
Creating the app might take a few additional minutes. The application will be available for use after this step.

Deploy

Prisma Access Browser

Using Workplace ONE