Prisma Access Browser
Manage Prisma Access Browser Devices
Table of Contents
Expand All
|
Collapse All
Prisma Access Browser Docs
Manage Prisma Access Browser Devices
Prisma Access Browser
DevicesLearn how to monitor devices running
Prisma Access Browser
, and create device
groups.Where Can I Use This? | What Do I Need? |
---|---|
|
|
The device directory provides a roster of your
Prisma Access Browser
devices and device
groups. The page is tabbed so that you can choose which view you want to see:
Devices
or Device Groups
. The
Device Groups
tab allows you to create and examine groups
of devices. This becomes important when defining rules and policies.Manage Devices
- FromStrata Cloud Manager, select.ManageConfigurationPrisma Access BrowserDirectoryDevicesYou can see the total number ofPrisma Access Browserdevices displayed at the top of the page. By default, the Devices screen displays the first 50 devices based on your sort order. ClickLoad 50 Moreto move to the next page of devices.
- Review the device data.The Device Directory allows you to see the details of each device, and includes the following information:
- Name—The device's hostname.
- User—ThePrisma Access Browseruser's browser login name. Click the name to see user details, such as the devices and device groups associated with the user.
- IP address—The device's external IP address.
- Device groups—The number of device groups to which the device belongs.
- Browser version—The browser version that's running on the device.
- Device type—The type of device. The options are:
- Desktop
- Laptop
- VM
- Mobile
- Unknown
- OS platform—The operating system installed on the device (Windows, macOS, iOS, Android, Linux, Unknown).
- OS version—The version of OS running on the device.
- Last seen—The time the device last recorded an event toPrisma Access Browser. Hover over the field to see the full timestamp.
- Investigate devices using search and filters.
- Search by device name or user name.
- Filter the devices based onDevice Groups,OS platform,EPP status,Last seen date,Screen lock status,Disk encryption status, andFirewall status.
- View details about a specific device.
- Click on a specific device on the list to see the device details.
- Review the device-specific details, including:
- User—The device user's name.
- Device type—The device type (desktop, laptop, VM, mobile, or unknown).
- OS platform—The operating system installed on the device (Windows, macOS, iOS, Android, Linux, or Unknown).
- OS version—The OS version installed on the device.
- Browser brand—The name of the selected browser.
- Browser version—The browser version running on the device.
- First Seen—The elapsed time since the device first connected to the network. Hover over the field to see the full timestamp.
- Last Seen—The time the device last recorded an event toPrisma Access Browser. Hover over the field to see the full timestamp.
- Model—The device model.
- Device management—The device management system that's managing the device.
- Serial number—The device serial number.
- IP address—The device's external IP address.
- User-Agent—The request string that identifies the browser, device, and OS to network peers.
- MAC addresses—The MAC addresses of the network cards installed on the device.
- Posture—The status of the different posture requirements. Specific postures have a link to the details, and others have some additional information.
- Extensions—The Extensions (if any) installed with the browser.
- Device Groups—A list of the device groups to which the device belongs. Each group displays the relevant posture information, and a link to the device group.
- User Groups—A list of the user groups to which the device user belongs.
- Export device details for offline investigation.
- Click the Export icon.
- In the Export window, select one of the following options:
- Export all—Export all device data.
- Export filtered data—Export device details based on the current filters.
Manage Device Groups
The
Prisma Access Browser
has a device group function that allows you to create
different groups for different devices. Groups are dynamic. For example, you can
set up groups for specific managed devices, different subsidiary devices, or
contractors. As an administrator, you can exercise a considerable amount of
flexibility in configuring the device groups you need within your organization.
For example, groups meet changing business, operational, and organizational
circumstances. You can use device groups either with sign-in rules to set the
security bar for accessing Prisma Access Browser
, or with posture-focused scoping
for policy rules. For managing mobile device groups, see Create, Edit, and
Delete Prisma Access Mobile Device Groups.- FromStrata Cloud Manager, selectand then select theManageConfigurationPrisma Access BrowserDirectoryDevicesDevice Groupstab.You can see the total number ofPrisma Access Browserdevice groups displayed at the top of the page. By default, the Device Groups screen displays the first 50 device groups based on your sort order. ClickLoad 50 Moreto move to the next page of devices.
- Review the device group data.The Device Group Directory allows you to see the details of each device group, and includes the following information:
- Name—The device group name.
- Type—Prisma Access Browser, Mobile,Prisma Access BrowserExtension, or Chromebook.
- Attributes—Matching criteria for identifying which devices belong to the device group.
- Created at—The device group creation date. Hover over the field to see the full timestamp.
- Updated at—The device group last update date. Hover over the field to see the full timestamp.
- Add a device group.
- From theDevice groupstab, clickAdd device group.
- Name the device group.
- Select whether you want to create a device group forendpoints or forPrisma Access BrowserMobiledevices.
- Select and configure the attributes that devices must match in order to be part of the device group.Attributes match against device criteria, such as whether the device has disk encryption enabled, active endpoint protection, or complex password policy requirements. Enforcing device group membership based on attributes provides a granular way for you to ensure that the devicesPrisma Access Browserallows have good security posture. There are different attributes depending on whether you are creating a device group for Windows and macOS devices or for mobile devices.
- ClickCreate.
To edit or delete a device group, hover over the device group name in the director and click the pencil icon (to edit) or the trash icon (to delete). - Investigate devices using search and filters.
- Search by name or id.
- Filter the device groups based onType,Attributes,Created at, andUpdated at.
- Export device details for offline investigation.
- Click the Export icon.
- In the Export window, select one of the following options:
- Export all—Export all device group data.
- Export filtered data—Export device group details based on the current filters.