Prisma Access Browser
Windows Deployment
Table of Contents
Expand All
|
Collapse All
Prisma Access Browser Docs
Windows Deployment
These are the Windows deployment methods
The following deployment methods are available for Windows devices:
Online Installers
The online installer is a stub that fetches the latest version of the Prisma Access Browser and installs it.
The online installer automatically retrieves the latest version of the
browser from either the Stable or Long-Term Support (LTS) channel. The browser
package includes an integrated updater that applies updates according to the
"Deployments" settings specified in the policy manager under "Browser
Customizations." Administrators can configure upgrade requirements and scheduling
per individual users or user groups by adjusting the relevant policies.
Windows MSI
- The MSI installer uses the standard Microsoft Windows switches for silent installation.
- Windows MSI Installer.
Windows LTS MSI
- The LTS installer uses the MSI features, but allows you to delay the installation.
- Windows LTS MSI Installer.
Offline Installer
Offline installers consist of a standalone installation file that enables browser
installation on systems without an internet connection. The development team updates
and releases the installers with each new browser version. The version feeds contain
only recent and supported browser versions. We strongly recommend that you install
the latest version to ensure access to all security updates.
Windows
- You can install the browser while offline using a dedicated MSI. Use the
following parameters:
- CHECK_ADMIN_POLICY_BEFORE_UPGRADE: Pins the version and prevents the updater from updating to the latest version until a user logs-in and receives a fresh policy.Default: false
- Msiexec /i <path-to-msi> CHECK_ADMIN_POLICY_BEFORE_UPGRADE=true
Version Feed
The latest offline installers care found at the following location:
Browser Updates
The browser follows a weekly update schedule aligned with Chrome’s release
cycle, which includes weekly security patches and a major version update with new
features approximately every month.
Administrators can select between two release channels through the
deployment policy:
- Stable Channel (default): Receives weekly updates that include both new features and security patches.
- Long-Term Support (LTS) Channel: Receives weekly security patches and new Prisma Access Browser and Chromium features only during the monthly major version updates.
The Deployment policy in the management console allows customization
of the deployment delay for new features and configuration of the update enforcement
schedule.
Updates downloaded during the update process are applied at the next
browser start or restart. Active browser sessions will display a notification
prompting users to restart their browsers to apply the update.
WINDOWS - Windows Installations with Auto-Update
Windows installations configured with auto-update include both the browser
and an updater service agent. This agent operates independently of the browser and
is triggered by a system-level scheduled task.
- Background Updates: When the machine is powered on, the scheduled task periodically checks for new browser versions, even if no user is logged in.
- Manual Update Check: Users can manually trigger an update check by navigating to the About page at prisma://settings/help. If an update is available, the update service will notify the user and provide the option to install it.