>
    Strata Copilot
    Suspend a Prisma Browser Device
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Browser
    3. Prisma Access Browser Administration
    4. Manage Prisma Browser Devices
    5. Suspend a Prisma Browser Device
    Download PDF
    Prisma Browser

    Suspend a Prisma Browser Device

    Table of Contents

    Suspend a Prisma Browser Device

    Immediately revoke access to Prisma Browser on a specific Desktop device by suspending it. Optionally wipe local browser data or abort a pending wipe.
    Where Can I Use This?What Do I Need?
    • You must have write permissions in the management console.
    • The tenant must not be in draft mode.
    Use device suspension to revoke browser access on a specific device without affecting the user's other devices. This is useful when a device is compromised, lost, or no longer authorized.
    Use device suspension as a remediation action when you need to revoke access to a specific device without affecting the user's access to their other devices. This can happen in one of the following circumstances:
    • The device is lost.
    • The device is compromised.
    • The device is no longer authorised.
    Suspended users see a block page informing them that an administrator suspended their access to the browser.
    Platform Support
    DesktopExtensionMobile
    YesNoNo

    Suspend a Device from the Devices Page

    Suspend a specific device directly from the Devices management page.
    1. In the management console, navigate to AdministrationDevices.
    2. Locate the device you want to suspend and click the actions menu (⋮).
    3. Select Suspend device.
      If the Suspend & wipe device option appears, this indicates the wipe capability is enabled for your tenant.
    4. In the confirmation dialog, review the impact statement.
      The statement confirms that the selected device of the specified user will be immediately suspended, and the user will not be able to use the device afterwards to access the browser.
    5. (Optional) Select the Wipe all local device data checkbox to clear local browser data upon suspension.
      Wiping clears cookies, cache, bookmarks, browsing and download history, passwords and passkeys, autofill data, and site settings. Data re-syncs if the device is later resumed.
    6. Click Suspend to confirm.
      The device status changes to suspended (or suspendedWipe if wipe was selected). The device displays the suspension block page.

    Suspend a Device from the User Drawer

    Suspend a specific device from within a user's details drawer.
    1. Navigate to AdministrationUsers.
    2. Click on the user whose device you want to suspend to open their details drawer.
    3. In the user drawer, locate the device in the devices list and click the actions menu (⋮) for that device.
    4. Select Suspend device (or Suspend & wipe device).
    5. Review the confirmation dialog and click Suspend.
      The device is immediately suspended. The user's other devices remain unaffected.

    Wipe Local Data from a Suspended Device

    After suspending a device, you can wipe its local browser data.
    The device must already be in suspended status. If the device is active, use the suspend action with the wipe checkbox instead.
    Wiping clears cookies, cache, bookmarks, browsing and download history, passwords and passkeys, autofill data, and site settings. This action bypasses draft mode.
    1. Navigate to AdministrationDevices.
    2. Locate the suspended device and click the actions menu (⋮).
    3. Select Wipe device data.
    4. Confirm the wipe action in the dialog.
      The device status changes to suspendedWipe. Local data is cleared on next device connection. Data will re-sync if the device is later resumed.

    Abort a Pending Wipe

    Cancel a pending wipe operation on a suspended device before it executes.
    The device must be in suspendedWipe status and the wipe must not yet have been executed on the device.
    Aborting a wipe transitions the device from suspendedWipe back to suspended. The device remains suspended but its local data is preserved.
    1. Navigate to AdministrationDevices.
    2. Locate the device with pending wipe and click the actions menu (⋮).
    3. Select Abort wipe.
    4. In the confirmation dialog, review the message confirming that the device will not be wiped but will remain suspended.
    5. Click Abort wipe to confirm.
      The device status returns to suspended. The wipe operation is cancelled and local data is preserved.

    Resume a Suspended Device

    Restore access to Prisma Browser on a suspended device.
    1. Navigate to AdministrationDevices.
    2. Locate the suspended device and click the actions menu (⋮).
    3. Select Resume from suspend.
    4. Click Resume to confirm.
      The device status returns to active. The block page is dismissed and the user regains access. If data was wiped, it re-syncs automatically.

    What the End User Sees

    When a device is suspended, the Prisma Browser Desktop on that device displays a block page.
    The user sees the following on the suspended device:
    • Title: "An admin suspended access to the browser"
    • Description: "Please contact administrator for further details"
    • A Retry button that re-checks suspension status
    The block page persists until an administrator resumes the device. The user's other devices (including other Desktop devices) are not affected by a single device suspension.

    Audit Trail

    Device suspension and resume actions generate audit events for compliance tracking.
    The following audit events are logged when device suspension actions are performed:
    Audit Events
    ActionAudit EventDetails
    Suspend deviceDeviceSuspended (56)Records device ID, administrator, and whether wipe was requested
    Resume deviceDeviceResumed (57)Records device ID and administrator

    Device Status State Machine

    Valid device status transitions for suspension-related actions.
    Valid Status Transitions
    ActionFrom StatusTo StatusNotes
    SuspendactivesuspendedImmediate effect
    Suspend with wipeactivesuspendedWipeWipe executes on next device connection
    Wipe (post-suspend)suspendedsuspendedWipeAdd wipe to already-suspended device
    Abort wipesuspendedWipesuspendedCancels wipe; device stays suspended
    ResumesuspendedactiveAccess restored; data re-syncs if wiped
    ResumesuspendedWipeactiveAccess restored; data re-syncs

    Considerations

    Important details and limitations for device suspension.
    • Device suspension applies only to Prisma Browser Desktop. Extension and mobile devices cannot be individually suspended.
    • Suspension takes effect immediately — the user does not need to restart the browser on the affected device.
    • Suspension bypasses draft mode — changes apply immediately without requiring a publish action.
    • Suspending a single device does not affect the user's other devices.
    • The abort wipe option is only available while the wipe is pending. Once the device connects and the wipe executes, it cannot be reversed.
    • If wipe is selected, local data (cookies, cache, bookmarks, history, passwords, autofill, site settings) is cleared. Data re-syncs upon resume.
    • Archived devices cannot be suspended.
    • To suspend all devices for a user at once, see Suspend a Prisma Browser User.

    © 2026 Palo Alto Networks, Inc. All rights reserved.