Remote Browser Isolation
What's New in Remote Browser Isolation
Table of Contents
Expand All
|
Collapse All
Remote Browser Isolation Docs
What's New in Remote Browser Isolation
Review the new features in Remote Browser Isolation (RBI).
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Review the latest feature updates for Remote Browser Isolation (RBI) along with the
Prisma Access
versions
needed for the features.
- What's New in February 2025
- What's New in September 2024
- What's New in July 2024
- What's New in June 2024
Compatible Prisma Access Versions for Remote Browser Isolation Features
Remote Browser Isolation (RBI) 2.1 requires Prisma Access 5.2.1. Prisma Access 5.2.1 is
available in two versions:
- 5.2.1 Innovation runs a PAN-OS 11.2.4 (hotfix 2) dataplane. An upgrade to PAN-OS 11.2.4 (hotfix 2) is required to implement 5.2.1 Innovation features.
- 5.2.1 Preferred runs a PAN-OS 10.2.10 dataplane. If your deployment is running a lower dataplane version, a dataplane upgrade to PAN-OS 10.2.10 is required to implement 5.2.1 Preferred features.
The following table shows the Prisma Access versions that are compatible with Remote
Browser Isolation.
| RBI Features | Minimum Required Prisma Access Version | Minimum Required Dataplane Version |
|---|---|---|
| RBI 2.1 | ||
|
Host Information Profile Support for Policy Enforcement Along
with RBI Functionality
Language Localization for Isolated Traffic
On-Premises Active Directory Support for RBI
| Prisma Access 5.2.1 Innovation | PAN-OS 11.2.4 (hotfix 2) |
| All other features | Prisma Access 5.2.1 Preferred | PAN-OS 10.2.10 |
| RBI 2.1 China | ||
| RBI in China | Prisma Access China 5.2.0 | PAN-OS 11.2.3 |
| RBI 2.0 | ||
|
Mobile Support for RBI
Browser Support for RBI
|
Prisma Access 5.1 Innovation
Prisma Access 5.0.1 Preferred
|
PAN-OS 11.2.0
PAN-OS 10.2.9
|
|
Third-Party CDR Integration for Remote Browser Isolation
|
Prisma Access 5.1 Innovation
|
PAN-OS 11.2.0
|
| RBI 1.3 | ||
| Maintenance release |
Prisma Access 5.1 Innovation
Prisma Access 5.0.1 Preferred
|
PAN-OS 11.2.0
PAN-OS 10.2.9 (hotfix 2)
|
| RBI 1.1 | ||
| Maintenance release | Prisma Access 5.0 Innovation | PAN-OS 10.2.8 |
| RBI 1.0 | ||
| Initial release | Prisma Access 5.0 Innovation | PAN-OS 10.2.8 |
RBI supports isolated browsing in most of the popular web browsers on desktop and mobile
devices.
What's New in February 2025
Host Information Profile Support for Policy Enforcement Along with RBI Functionality (Innovation Release)
|
Supported in:
|
You can now leverage host information profiles to enhance your policy enforcement
capabilities while utilizing Remote Browser Isolation (RBI). This feature allows
for the use of host information profiles for policy enforcement, such as
specific machine identification, and routing traffic through isolation.
Language Localization for Isolated Traffic (Innovation Release)
|
Supported in:
|
You can now take advantage of language localization support for isolated traffic
using the Prisma Access Edge regions and locations framework. This feature
enhances your ability to deliver a tailored browsing experience to users across
different geographical areas while maintaining the security benefits of traffic
isolation. It ensures that web content accessed through isolation is presented
in the appropriate language based on the user's location or preferences.
Enhanced Near-Native Experience for RBI
|
Supported in:
|
RBI provides comprehensive out-of-the-box support for Chromium-based widgets and
context menus, delivering an improved user experience. This includes improved
functionality for common actions like Ctrl+F search and
right-click options similar to a native browser.
On-Premises Active Directory Support for RBI
|
Supported in:
|
What's New in September 2024
Remote Browser Isolation in China
|
Supported in:
|
Remote Browser Isolation (RBI) is
available in China to protect your users' managed devices from malware and potential
zero-day attacks that result from web browsing activity. RBI in China works with Prisma Access in
China to isolate and transfer all browsing activity to Prisma Access, which secures
and isolates potentially malicious code and content away from your users' managed
devices and corporate networks.
The capabilities available in RBI in China are the same as the RBI capabilities for the rest of the
world, and the procedures for configuring RBI in China are the same.
What's New in July 2024
Mobile Support for Remote Browser Isolation
|
Supported in:
|
Remote Browser Isolation (RBI) now supports Android, iOS, and iPadOS devices for
isolated browsing to help broaden the device support for your managed users. You
can view the combination of supported operating systems and
browsers that your users can use for isolated browsing.
Browser Support for Remote Browser Isolation
|
Supported in:
|
Remote Browser Isolation (RBI) now supports the Mozilla Firebox browser for
isolated browsing on macOS and Windows desktop operating systems, as well as
Android, iOS, and iPadOS mobile operating systems. You can view the combination
of supported browsers and operating
systems that your users can use for isolated browsing.
What's New in June 2024
Third-Party CDR Integration for Remote Browser Isolation
|
Supported in:
|
Protect your users against zero-day threats hidden in files that they download from
the internet by integrating Remote Browser Isolation (RBI) with a
third-party content disarm and reconstruction (CDR) provider.
When users browse the web and download various types of files to their local devices,
they are exposed to zero-day threats. Even with file scanning or antivirus solutions
in play, these threats could escape detection, allowing malware to be delivered to
your users’ managed devices and rendering them as patient-zero.
With third-party CDR integration, any files downloaded while in RBI will be disarmed
and reconstructed using CDR. The CDR provider will remove the malicious content from
the files and deliver the sanitized files in their original file formats to the
user.
You can integrate with Votiro to utilize Votiro's
CDR capabilities to process and appropriately sanitize a file before it is
downloaded to the user’s device from RBI, thus keeping the user protected from any
potentially malicious executables embedded in the file.