Remote Browser Isolation
What's New in Remote Browser Isolation
Table of Contents
What's New in Remote Browser Isolation
Review the new features in Remote Browser Isolation (RBI).
Where Can I Use This? | What Do I Need? |
---|---|
|
|
Review the latest feature updates for Remote Browser Isolation (RBI) along with the Prisma Access
versions needed for the features.
- What's New in RBI 2.6
- What's New in RBI 2.4
- What's New in RBI 2.3
- What's New in RBI 2.1
- What's New in RBI 2.1 China
- What's New in RBI 2.0
Compatible Prisma Access Versions for Remote Browser Isolation Features
Remote Browser Isolation (RBI) 2.6 requires Prisma Access 5.2.1 or later.
The following table shows the Prisma Access dataplane versions that are compatible
with RBI features.
RBI Features | Minimum Required Dataplane Version |
---|---|
RBI 2.6 | |
Dynamic Language Detection for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
RBI 2.4 | |
In-Browser Translation for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
RBI 2.3.1 | |
Print with Header and Footer for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
RBI 2.3 | |
Granular File Transfer Controls in RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
RBI 2.1 | |
Host Information Profile Support for Policy Enforcement Along
with RBI Functionality
Language Localization for Isolated Traffic
On-Premises Active Directory Support for RBI
| PAN-OS 11.2.4 |
All other features | PAN-OS 10.2.10 |
RBI 2.1 China | |
RBI in China | PAN-OS 11.2.3 |
RBI 2.0 | |
Mobile Support for RBI
Browser Support for RBI
|
PAN-OS 11.2.0
PAN-OS 10.2.9
|
Third-Party CDR Integration for Remote Browser Isolation
|
PAN-OS 11.2.0
|
RBI 1.3 | |
Maintenance release |
PAN-OS 11.2.0
PAN-OS 10.2.9 (hotfix 2)
|
RBI 1.1 | |
Maintenance release | PAN-OS 10.2.8 |
RBI 1.0 | |
Initial release | PAN-OS 10.2.8 |
RBI supports isolated browsing in most of the popular web browsers on desktop and mobile
devices.
What's New in RBI 2.6
Dynamic Language Detection for Remote Browser Isolation
Supported in:
|
Dynamic language detection for Remote
Browser Isolation (RBI) automatically recognizes and adapts to your end users'
browser language preferences to provide a seamless multilingual experience during
isolated browsing sessions. This feature consists of two complementary capabilities
that work together to ensure both the RBI user interface and the websites your users
visit respond appropriately to their language settings. The system uses your users'
browser native language configuration to determine their preferred language and
applies this information to their isolated browsing experience. You don’t need to
configure these features as they activate automatically when your users access RBI,
detecting their browser language settings and applying them consistently throughout
their sessions.
Dynamic Language Detection for RBI End-User Notifications
When your users access Remote Browser Isolation (RBI), the system automatically
detects their browser's preferred language settings and displays the RBI interface
elements in their native language. This feature eliminates the confusion and
security risks that arise when critical system notifications, error messages, and
RBI interface components appear only in English for non-English speaking users. The
system reads your users' browser language preferences and renders all RBI
notification elements including buttons, labels, messages, dialogs, alert
notifications, and floating action button texts in their preferred language.
If your users' browsers have multiple languages configured, RBI uses the primary
language setting as the default. When RBI does not support your users' preferred
language, all interface elements automatically fall back to English to ensure
consistent functionality. RBI currently supports Japanese, Chinese (Simplified),
Chinese (Traditional), and Korean languages alongside English for end-user
notifications.
Your users benefit from this feature because it reduces the likelihood of ignoring
important security warnings due to language barriers and improves their overall user
experience when accessing isolated web content. This language detection operates
independently of your users' main website language settings. Website language
changes or browser translation actions don’t affect the RBI interface language,
which remains tied to their browser's preferred language configuration.
Dynamic Language Detection for Native Language Browsing
RBI automatically detects and synchronizes your end users' browser language
preferences to ensure websites serve content in their native languages during
isolated browsing sessions. This capability addresses the issue where RBI would only
send English language preferences to web servers regardless of users' actual browser
configurations, which caused websites to always return English-language content even
when users configured different preferred languages in their browsers.
You will benefit from this feature when your organization has a global workforce that
regularly accesses multilingual websites, international corporate applications, or
cloud services that adapt content based on browser language settings. The system
reads the language preferences from each user's browser and forwards the complete
language preference list to destination web servers in the user's configured
priority order. This ensures that users accessing Japanese corporate portals,
Chinese e-commerce sites, or European government websites receive content in their
expected languages rather than defaulting to English versions.
The language detection operates transparently without requiring any configuration
changes to your RBI deployment or user browsers. When the system can’t determine
language preferences, it defaults to English to maintain reliable operation. This
capability functions across all supported platforms and browsers, preserving the
natural multilingual browsing experience your users expect while maintaining the
security isolation that protects your organization from web-based threats.
What's New in RBI 2.4
In-Browser Translation for Remote Browser Isolation
Supported in:
|
Remote Browser Isolation (RBI) web translation enables your users to
translate webpage content directly within their isolated browsing sessions without
compromising security. When users access websites through RBI, they can now use the
context menu to translate an entire webpage or selected text portions into their
browser's preferred language. The feature integrates the Google Cloud Translation
API with the remote browser running in the RBI infrastructure, preserving the native
browser translation experience users expect from local browsing.
Users configure their preferred language through the local browser's language
settings, and RBI automatically detects this preference to offer appropriate
translation options. When users encounter content in a foreign language, they can
right-click on the page to access the translate option in the context menu, which
will convert the entire webpage to their preferred language. For specific text
segments, they can highlight the content and right-click on the page and select the
option to translate only the selected portion, with results displayed in a
translation widget.
The translation feature proves valuable for global organizations where employees
regularly access content in multiple languages as part of their daily workflows.
Users can configure automatic translation settings for specific websites, enabling
frequently visited foreign language sites to translate automatically upon loading
(applicable only if the cache clearing option is not enabled on the tenant). This
feature supports all major world languages available through Google Translate and
maintains translation preferences across RBI sessions.
What's New in RBI 2.3.1
Print with Header and Footer for Remote Browser Isolation
Supported in:
|
The print with header and footer feature
enables users to include header and footer information when printing webpages
rendered via Remote Browser Isolation (RBI). When using RBI, the standard print
options, such as pressing Ctrl+P, using the default context
menu, or selecting in-page print options, don’t include headers and footers in the
printed output. To enhance the print functionality, RBI now includes a dedicated
option in the context menu to print headers and footers in web content.
RBI users can access this feature by right-clicking on the page while in an isolated
browsing session and selecting Print (with Header/Footer)
from the context menu. The feature is available across all desktop and mobile
devices that support RBI, ensuring consistent printing functionality regardless of
the device RBI users are using.
What's New in RBI 2.3
Granular File Transfer Controls in Remote Browser Isolation
Supported in:
|
You can now use isolation profiles in Remote Browser Isolation (RBI) to specify the types of files users can upload or
download, enabling more granular control over data transfers during
isolated browsing sessions. Previously, you can only allow or block all downloads or
all uploads during isolation, regardless of file type. The new capability helps to
enhance the security posture by reducing the attack surface and preventing various
types of cybersecurity threats. It also helps in data exfiltration by controlling
which categories of file types a user is able to upload.
You can configure allowed file types in isolation profiles using predefined
categories like Documents, Multimedia,
Archives,
Executables/Applications, and Source
Code. You can also specify up to five custom file extensions. When a
user attempts to download or upload a file during isolation, the RBI service checks
if the file type is allowed based on the configured profile. This prevents users
from transferring unauthorized file types, reducing the risk of data exfiltration or
malware introduction.
Key use cases include permitting users to download only document files, blocking
downloads of executable files, or permitting transfers of only specific approved
file types. The granular controls enable you to balance security and usability by
tailoring allowed file types to your organization's needs. Configuring file type
filtering enhances your data loss prevention capabilities and provides an additional
layer of protection against potential threats introduced through file transfers.
What's New in RBI 2.1
Host Information Profile Support for Policy Enforcement Along with RBI Functionality (Innovation Release)
Supported in:
|
You can now leverage host information profiles to enhance your policy enforcement
capabilities while utilizing Remote Browser Isolation (RBI). This feature allows
for the use of host information profiles for policy enforcement, such as
specific machine identification, and routing traffic through isolation.
Language Localization for Isolated Traffic (Innovation Release)
Supported in:
|
You can now take advantage of language localization support for isolated traffic
using the Prisma Access Edge regions and locations framework. This feature
enhances your ability to deliver a tailored browsing experience to users across
different geographical areas while maintaining the security benefits of traffic
isolation. It ensures that web content accessed through isolation is presented
in the appropriate language based on the user's location or preferences.
Enhanced Near-Native Experience for RBI
Supported in:
|
RBI provides comprehensive out-of-the-box support for Chromium-based widgets and
context menus, delivering an improved user experience. This includes improved
functionality for common actions like Ctrl+F search and
right-click options similar to a native browser.
On-Premises Active Directory Support for RBI
Supported in:
|
What's New in RBI 2.1 China
Remote Browser Isolation in China
Supported in:
|
Remote Browser Isolation (RBI) is
available in China to protect your users' managed devices from malware and potential
zero-day attacks that result from web browsing activity. RBI in China works with Prisma Access in
China to isolate and transfer all browsing activity to Prisma Access, which secures
and isolates potentially malicious code and content away from your users' managed
devices and corporate networks.
The capabilities available in RBI in China are the same as the RBI capabilities for the rest of the
world, and the procedures for configuring RBI in China are the same.
What's New in RBI 2.0
Mobile Support for Remote Browser Isolation
Supported in:
|
Remote Browser Isolation (RBI) now supports Android, iOS, and iPadOS devices for
isolated browsing to help broaden the device support for your managed users. You
can view the combination of supported operating systems and
browsers that your users can use for isolated browsing.
Browser Support for Remote Browser Isolation
Supported in:
|
Remote Browser Isolation (RBI) now supports the Mozilla Firebox browser for
isolated browsing on macOS and Windows desktop operating systems, as well as
Android, iOS, and iPadOS mobile operating systems. You can view the combination
of supported browsers and operating
systems that your users can use for isolated browsing.
Third-Party CDR Integration for Remote Browser Isolation
Supported in:
|
Protect your users against zero-day threats hidden in files that they download from
the internet by integrating Remote Browser Isolation (RBI) with a
third-party content disarm and reconstruction (CDR) provider.
When users browse the web and download various types of files to their local devices,
they are exposed to zero-day threats. Even with file scanning or antivirus solutions
in play, these threats could escape detection, allowing malware to be delivered to
your users’ managed devices and rendering them as patient-zero.
With third-party CDR integration, any files downloaded while in RBI will be disarmed
and reconstructed using CDR. The CDR provider will remove the malicious content from
the files and deliver the sanitized files in their original file formats to the
user.
You can integrate with Votiro to utilize Votiro's
CDR capabilities to process and appropriately sanitize a file before it is
downloaded to the user’s device from RBI, thus keeping the user protected from any
potentially malicious executables embedded in the file.