Windows Deployment
Focus
Focus
Prisma Access Browser

Windows Deployment

Table of Contents

Windows Deployment

These are the Windows deployment methods
The following deployment methods are available for Windows devices:

Online Installers

The online installer is a stub that fetches the latest version of the Prisma Access Browser and installs it.
The online installer automatically retrieves the latest version of the browser from either the Stable or Long-Term Support (LTS) channel. The browser package includes an integrated updater that applies updates according to the "Deployments" settings specified in the policy manager under "Browser Customizations." Administrators can configure upgrade requirements and scheduling per individual users or user groups by adjusting the relevant policies.
Windows MSI
Windows LTS MSI

Offline Installer

Offline installers consist of a standalone installation file that enables browser installation on systems without an internet connection. The development team updates and releases the installers with each new browser version. The version feeds contain only recent and supported browser versions. We strongly recommend that you install the latest version to ensure access to all security updates.
Windows
  • You can install the browser while offline using a dedicated MSI. Use the following parameters:
    • CHECK_ADMIN_POLICY_BEFORE_UPGRADE: Pins the version and prevents the updater from updating to the latest version until a user logs-in and receives a fresh policy.
      Default: false
    • Msiexec /i <path-to-msi> CHECK_ADMIN_POLICY_BEFORE_UPGRADE=true
Version Feed
The latest offline installers care found at the following location:

Browser Updates

The browser follows a weekly update schedule aligned with Chrome’s release cycle, which includes weekly security patches and a major version update with new features approximately every month.
Administrators can select between two release channels through the deployment policy:
  • Stable Channel (default): Receives weekly updates that include both new features and security patches.
  • Long-Term Support (LTS) Channel: Receives weekly security patches and new Prisma Access Browser and Chromium features only during the monthly major version updates.
The Deployment policy in the management console allows customization of the deployment delay for new features and configuration of the update enforcement schedule.
Updates downloaded during the update process are applied at the next browser start or restart. Active browser sessions will display a notification prompting users to restart their browsers to apply the update.
WINDOWS - Windows Installations with Auto-Update
Windows installations configured with auto-update include both the browser and an updater service agent. This agent operates independently of the browser and is triggered by a system-level scheduled task.
  • Background Updates: When the machine is powered on, the scheduled task periodically checks for new browser versions, even if no user is logged in.
  • Manual Update Check: Users can manually trigger an update check by navigating to the About page at prisma://settings/help. If an update is available, the update service will notify the user and provide the option to install it.