>
    Strata Copilot
    Manage Prisma Browser Applications
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Browser
    3. Manage Prisma Browser Applications
    Download PDF
    Prisma Browser

    Manage Prisma Browser Applications

    Table of Contents

    Manage Prisma Browser Applications

    Learn how to view and manage applications and application groups for Prisma Access Secure Enterprise Browser (Prisma Browser).
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Prisma Browser standalone
    • Prisma Access with Prisma Browser bundle license or Prisma Browser standalone license
    • Superuser or Prisma Browser Roles
    The Prisma Browser comes equipped with a predefined list of Verified applications. The Verified applications list references the Palo Alto Networks App-ID™ catalog of applications, and is regularly synced with the cloud database. The full application list is located in the Applipedia (https://applipedia.paloaltonetworks.com/), and more applications are added to the Prisma Browser every day.
    Additionally, you can create your custom applications if it is not included in the cloud database.
    Changes to applications and application groups are saved to a draft configuration and do not take effect until you publish the draft. For more information, see Manage Configuration Versions (Draft Mode).
    While the Prisma Browser uses the same application list generated by the App-ID classification system as other Palo Alto Networks products, the verified applications list might use a different naming schema compared to other platforms. As a result, the application list found in the Prisma Browser might differ in its naming conventions.
    Applications have dynamic lifecycles. New applications consistently join our catalog, while we remove others as they reach end-of-life, face acquisition, or cease to exist. If a policy rule references an application we deprecate, the UI immediately generates an alert, notifying you of the change.
    The application screens serve several purposes:
    • They generate statistics, allowing you to understand how workflows operate in the company.
    • You can incorporate the applications into Rules, allowing you to create workflows using only predefined applications and services.
    • Use of the Applications Directory provides information that can be sent to the Dashboards.
    The application list displays the details of each application, and includes the following information:
    • Name - The application name.
    • Source – The source of the application; either from the catalog or customized.
    • Category - The optionally configured category for the application. If the application isn't categorized, it will be listed as Uncategorized.
    • Risk -The site reputation: Ok, Moderate, or Danger. Hover over the value to see the Risk Score.
    • Rules - The number of policy rules where the application is included. This also includes rules that include “any” application.
    • Updated - The date when the application information was last updated. Hover over the field to see the full timestamp.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Search for specific applications.
    3. Filter the applications based on specific options:
        • Application Source - Filter by the application source - either Catalog - from the App-ID catalog, or Custom - a private application stored at the data center.
        • Category - The optionally configured category that can be selected for each application.
        • Risk - The reputation of the application - OK, Medium, or Danger.
        • Application groups - The groups that you can use to help manage the groups.
        • Is GenAI - Applications from the catalog that contain AI functionality.
        • Last updated – The date and time the application was last updated.
    4. Select an application to open the application drawer. The drawer contains some additional information regarding the application.
      • Time Frame - Allows viewing of the graphs for specific periods. This allows you to see how the selected application is used over time. Select from the following time frames:
        • Last 24 hours
        • Last 3 days
        • Last 7 days
        • Last 14 days
        • Last 30 days
        Graphs - display specific information that can be useful for examining application usage. Click on See more for additional information. The following information is displayed in the graphs:
        • Total active users
        • Total access events
        • Total data events
        • Total volume size
        Metadata - view different metadata information that is associated with the applications.

    Add a Custom Application

    You have a considerable amount of flexibility when it comes to creating new application entries on the Applications Directory. Whenever you need an application that isn't one of the verified applications included with the Prisma Browser, you can create a new, custom application.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. On the Application screen, click Add custom app.
    3. On the Add custom application window, enter the following information:
      1. Name - The name of the application. You can enter any name, and are not restricted to any application name.
      2. URLs - The URLs for the application. For more information on using the URL builder, click here. After you enter the URL, Add.
      3. Categories - You select entire classifications (categories) to add to the rule. The classification is divided into two categories - Malicious (for example, Phishing sites, Ransomware, Grayware) and Benign (for example, News and Media, Dating, Shopping).
      For more information, refer to Advanced URL Filtering.
    4. Add.
    5. The application will be added to the list of applications.
      URL Limits
      There are two types of URL Limits that apply to Custom Applications:
      1. Tenant-level URL limit:
        • A maximum number of URLs are allowed per tenant.
        • This represents the sum of all URLs across all custom applications.
      2. Custom application URL limit
        • A maximum number of URLs are allowed per custom application. The limit is 100 URLs per custom application.
        • Once the limit is exceeded, the application blocks additional URLs, and displays an error message.
        • There is a limit of 15,000 custom URLs permitted across all applications.

    Edit a Custom Application

    After you add a custom application, you can edit it.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Click the pencil icon on the right side.
    3. Make the required changes.
    4. Save changes.

    Delete a Custom Application

    If you no longer need a custom application, you can delete it.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Locate the custom application that you no longer need and hover on the entry.
    3. Select the trash bin icon on the right side.
    4. Delete at the prompt to confirm.
      If the custom application is linked to an existing rule, you need to disconnect it from the rule before deleting it.

    Add a Private Application

    CIDR support allows administrators to specify IPv4 address ranges using CIDR notation (for example, 10.0.0.0/8) when defining the network scope of a private application. Instead of listing individual IP addresses or FQDNs, administrators can define an entire subnet as a single entry. CIDR entries are accepted in the same input field as FQDNs and IP addresses.
    Private applications are applications that your enterprise manages internally. The application remains in your data center and is only accessible by internal users who have the appropriate permissions.
    The Prisma Browser handles these applications separately from custom applications. Private applications require that you configure the FQDNs, IP addresses, and CIDR ranges that are required for accessing the application.
    You can configure access to a wider set of private apps by using wildcards.
    Wildcards are supported only at the beginning of subdomains.
    For example: *.example.com or *.shop.example.com
    CIDR entries are IPv4 only. Accepted prefix lengths are /8 through /32. Entries must use standard dotted-quad notation with no leading zeros (for example, 10.0.0.0/8, 192.168.1.0/24).
    Custom Icons, described in step 3b below, replace the default application icon, and is displayed wherever the application appears in Prisma Browser
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. On the Application screen, click Private Applications and then Add private app.
    3. On the Add private application window, enter the following information:
      1. Name - The name of the application. You can enter any name, and are not restricted to any application name.
      2. Custom Icon - To add a custom icon for the application, do the following:
        1. In the Add Private Application window, locate the icon upload area.
        2. Click the upload area to select an icon, or drag and drop the icon to that location,
        3. The icon must meet the following requirements:
          • File format .png or .jpg
          • Maximum file size - 250 KB
        4. When the icon is loaded, a preview is displayed.
        If you close the model without saving the icon, it will not be saved.
      3. FQDNs, IPs, and CIDRs - The FQDNs, IP addresses, and CIDR ranges for the application. Enter each value and click Add. Select one of the following entry types:
        • FQDN - A fully qualified domain name (for example, app.corp.example.com). Wildcards are supported at the beginning of subdomains only.
        • IP address - A single IPv4 address (for example, 10.1.2.3).
        • CIDR range - An IPv4 subnet in CIDR notation (for example, 10.0.0.0/8). Accepted prefix lengths are /8 through /32.
      4. Categories - If needed, assign a category for this application from the predefined list.
      The total number of FQDNs, IP addresses, and CIDR entries counts toward the per-application entry limit of 100 entries.
    4. Click Add.

    Edit a Private Application

    After you create private applications, you can modify them by adding or removing URLs, FQDNs, or CIDR ranges, changing the category, or updating the application icon.
    To change the icon, click the existing icon preview and upload a new image.
    To remove the icon, click the delete icon on the preview — the application reverts to the default generic icon.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Locate the application that you need to edit and hover on the entry.
    3. Select the pencil icon on the right side.
    4. Make the required changes.
    5. Save.

    Delete a Private Application

    If you no longer need a custom application, you can delete it.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Locate the custom application that you no longer need and hover on the entry.
    3. Select the trash bin icon on the right side.
    4. Delete at the prompt to confirm.
      If the private application is linked to an existing rule, you need to disconnect it from the rule before deleting it.

    Add Remote Connections

    Remote connections are non-web apps that are based on the Native RDP/SSH protocols. For more information, refer to Configure Native RDP/SSH.

    Add an Application Group

    After you create your applications, you can now create Application Groups and assign policies to these groups. Any changes to the content of an Application Group will automatically update the list of apps in the assigned policy. Application Groups can contain a mix of any app type (from catalog, custom, and private).
    You can use application groups for scenarios such as:
    • Manage Policy at Scale: You can organize your apps into different groups and set basic rules for each group. This way, you can add or remove apps from the groups without needing to change the rules themselves.
    • Management Tool: When you are managing hundreds of applications, you can use groups to better organize and contextualize applications. For example, you can create groups for internal QA/Staging vs. Production environments, internal productivity apps, or apps containing PII or sensitive information, even if you do not want to assign a rule to them.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Select the Application Group tab.
    3. Select + Add application group.
    4. On the Add application group window, enter a Name for the group, an optional Description for the group.
    5. Select the down arrow and select the applications to add to the group. You can filter the applications by the application Catalog, Private applications, or Custom applications. Additionally, you can search for specific apps.
    6. After you have chosen the applications to add to your group, Save, and the group will be added to the list.

    Edit an Application Group

    After you create the Application Groups, you can modify them by adding or removing applications.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Locate the application group that you need to edit and hover on the entry.
    3. Select the pencil icon on the right side.
    4. Make the required changes.
    5. Save.

    Delete an Application Group

    If you no longer need an application group, you can delete it.
    If the Application Group is linked to an existing Rule, you need to disconnect the group from the rule before deleting it.
    1. From Strata Cloud Manager, ConfigurationPolicy ObjectsApplications.
    2. Locate the application group that you no longer need and hover on the entry.
    3. Select the trash bin icon on the right side.
    4. Delete at the prompt to confirm.

    © 2026 Palo Alto Networks, Inc. All rights reserved.