>
    Configure Customization
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access Browser
    3. Prisma Access Browser Administration
    4. Manage Prisma Access Browser Policy Profiles
    5. Configure Prisma Access Browser Browser Customization Controls
    6. Configure Customization
    Download PDF
    Prisma Access Browser

    Configure Customization

    Table of Contents

    Configure Customization

    PAB Customization controls and policies
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Prisma Access Browser standalone
    • Prisma Access with Prisma Access Browser bundle license or Prisma Access Browser standalone license
    • Superuser or Prisma Access Browser role

    Incognito

    Mobile Browser - Full support
    This feature allows you to control whether or not the Prisma Access Browser can be opened in Incognito mode. A user in Incognito mode is anonymized from the Web only. Admin visibility and Browser Policies are not affected by this feature. You can set Access & Data Control rules to allow access to personal websites without logging.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Incognito.
    3. Select one of the following options:
      • Allow - Permit use of Incognito mode in Prisma Access Browser.
      • Block - Block use of Incognito mode in The Prisma Access Browser.
      • Force - Force use of Incognito mode in the Prisma Access Browser.
    4. Click Set.

    Extension Force Install

    Mobile Browser - No support
    This feature allows you to configure specific extensions that are to be installed automatically in the Prisma Access Browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Extension Force Install.
    3. Click Add Extension.
    4. Select the Store that is the source of the extension. The options are:
      • Chrome Web Store.
      • Custom URL. Enter the URL.
    5. Select whether the extension will be pinned to the toolbar for the end users.
    6. Select whether the extension will be automatically installed in Incognito mode.
    7. If applicable, enter the Custom Configuration.
    8. Click Add.

    User-Agent

    Mobile Browser - Full support
    The User-Agent feature allows you to add additional Agent components to the default User-Agent string to identify the Prisma Access Browser HTTP/S requests.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select User-Agent .
    3. Select one of the following options:
      • Use default User-Agent - Use the default User-Agent string when identifying requests from the Prisma Access Browser. This is the same as the Chrome User-Agent
      • Set an additional User-Agent component - Configure an additional User-Agent for the Prisma Access Browser by entering the component name in the appropriate field.
      • User-Agent desktop mode - Allows you to ensure that applications that do not function properly in mobile browsers open in desktop mode.
    4. Click Set.

    Custom HTTP Header

    Mobile Browser - No support
    Custom HTTP headers let the browser pass additional information along with HTTP/S requests. An HTTP header consists of its case-insensitive name followed by a colon (:), then by its value.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Custom HTTP Header.
    3. Select one of the following options:
      • Keep default header - Use the default setting, without any custom HTTP headers.
      • Add a custom header - Configure a custom HTTP header that will identify the Prisma Access Browser HTTP/S requests.
        • Custom Header Name - Add a name to identify the custom header.
        • Custom Header Value - Add a custom value for the header.
    4. Click Set.

    Profile Sync

    Mobile Browser - Partial support (iOS only)
    In some organizations, employees use the Prisma Access Browser on multiple devices. This feature enables you to synchronize profiles across all Prisma Access Browser installations on different devices.
    You have the option of customizing the browser settings to sync everything - all information that is associated with the user - or selecting specific information that will be included in the sync.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Profile Sync.
    3. Select one of the following options:
      • Enable- Allow a Profile Sync. You can select the following sync options:
        • Sync everything - Select all the information that can be synchronized.
        • Customize sync - Select the components that will be synchronized across multiple devices.
      • Disable - Don't perform profile sync.
    4. Click Set.

    Default Browser

    Mobile Browser - Full support
    This feature allows you to control whether Prisma Access Browser will be the default browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Default Browser.
    3. Select one of the following options:
      • Suggest user - Suggest that users select the Prisma Access Browser.
      • Don't suggest user - don't suggest using the Prisma Access Browser.
    4. Click Set.

    Onboarding Wizard

    Mobile Browser - No support
    This feature allows you to configure the Onboarding Wizard that is displayed to all new Prisma Access Browser users when they install the browser. The wizard assists end users in installing and configuring the Prisma Access Browser, and at the same time - displays a brief tutorial of some of the more popular features.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Onboarding Wizard.
    3. Select one of the following options:
      • Enabled - the Onboarding Wizard will be enabled for use. You will be able to select the steps that will be made available to the users.
        By default, all steps are enabled.
        1. Step 1: Welcome and language selection (Editable) allows you to select either the default welcome message or create a custom message for your users. The custom content allows 160 characters for a title and 320 characters as the message.
        2. In Step 2: Customize, users can add their picture. If you did not configure the Brand Color, users will be able to configure their own preferred color. If the Brand Color was configured, the color option won't be displayed.
        3. Step 3: Import allows users to import their existing resources including:
          • Browsing History
          • Favorites / Bookmarks
          • Saved Passwords
          • Cookies
          • Extensions
          • Extension Data
          • Tabs and Tab Groups
        4. Step 4: Labels & Policy indicator provides a brief description on how users can benefit from the displayed labels.
        5. Step 5: Popup extensions & Notifications encourages users to use the Prisma Access Browser icon to help manage their account.
        6. Step 6: Restrictions describes to users the way that Prisma Access Browser uses the restrictions in the browser.
        7. Step 7: Mobile & Sync informs users that the mobile application is a seamless extension of the desktop browser.
        8. Step 8: Feedback invites users to send their comments and suggestions.
      • Disabled - the Onboarding Wizard won't be enabled.
    4. Click Set.

    Sidebar

    Mobile Browser - No support
    This feature allows you to control whether the users will be able to use the sidebar. The sidebar allows you to create shortcuts designed for end-users, so that they will be able to save time when using their regular/preferred applications. Users can also display or hide it on their own by opening the Control Pane and selecting Show Sidebar.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Sidebar.
    3. Select one of the following options:
      • Enable - the Sidebar will be enabled for use.
      • Disable - the Sidebar will be disabled from use.
    4. Click Set.

    Search Engine Content Filtering

    Mobile Browser - Full support
    When you enable the Safe Search feature, you extend the URL filtering to include the selected search engines. .
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Search Engine Content Filtering.
    3. Select one of the following options:
      • Enable-Enable the feature. You also need to select at least one of the available search engines to be used for safe search.
      • Disable- Disable the feature.
    4. Click Set.

    Microsoft Auto-SSO (Windows only)

    Mobile Browser - No support
    This feature enables automatic web-application user sign-in for Microsoft Entra ID accounts, based on the device signed-in account.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Microsoft Auto-SSO.
    3. Select one of the following options:
      • Enable - Enable the automatic user sign-in for Microsoft Entra accounts.
      • Disable - Disable the Microsoft auto-sso feature.
      It is strongly recommended that this feature be limited to managed devices only.
    4. Click Set.

    Automatic Client Certificate Selection

    Mobile Browser - No support
    This control allows you to configure matching client certificates for specified URLs to facilitate seamless authentication. When you configure this control, it acts as an override to any lower priority rule definitions.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Automatic Client Certificate Selection.
    3. Select one of the following options:
      • Enable: Allows you to bypass manual certificate selection. Specified URLs will operate seamlessly. Enter the following information in the Certificate criteria for specific URLs section
        1. Enter A URL pattern that will use the certificate. Click here for more information about theURL pattern syntax.
        2. From the drop-down list, select a criteria for the certificate.
        3. Enter the name of the certificate's issuer organization.
          • You can add multiple criteria and issuer organization for each URL.
          • Additionally, you can add as many URLs as needed.
      • Disable: Users will be required to manually choose the certificate they need when browsing the URL
    4. Click Set.
      If you enable Google Workspace Integration, Automatic Client Certificate Selection for Google URLs may not function properly.

    History Collection

    This Policy only supports Prisma Access Browser Extension.
    This feature allows you to create a History Collection that allows you to identify browsing trends and behavior patterns of your users.
    You need to be aware of the following limitations regarding this feature:
    • The information is collected from Prisma Access Browser Extension users only.
    • The historical information will be collected beginning up to 30 days before the installation.
    • The Scope of a rule containing History Collection is 50 users.
    For more information, refer to Prisma Access Browser Extension History Collection
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select History Collection.
      If you do not see the History Collection, make sure that the Browser Extension controls are visible.
    3. Select one of the following options:
      • Enable - Enable the History Collection.
      • Disable - Disable the History Collection.
    4. Click Set.

    On Browser Startup

    Mobile Browser - No support
    This feature allows you to control the Prisma Access Browser's "On-Startup" routine.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select On Browser Startup.
    3. Select one of the following options:
      • Configured by the user - Users will be able to determine exactly how the browser will open.
      • Restore the Last Session (Continue where the user left off - Restore the last set of browser tabs, allowing the users to continue working.
      • Restore the last session and open a list of URLs - Allows the user to reopen the last set of browser tabs. This option will also open an additional list of (predefined) apps. When you select this field, you will be able to add additional web pages to open.
      • Open a New Tab Page - Opens a generic new tab page.
      • Web pages to open on startup - Enter a list of web pages that will open on startup.
    4. Click Set.

    Default Search Provider

    Mobile Browser - No support
    This feature allows you to set up the way the browser search engine works. This feature allows you to either configure a search engine, allow your users to select their preferred browser, or disable searching entirely on the Prisma Access Browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Default Search Provider.
    3. Select one of the following options:
      • Enable - You can select the search provider that will serve as the default for all users. To configure default search engine, provide the following information:
        • Search Provider - Select a search provider from the list. You can also select a customized provider. If you use a custom provider, enter a Search Provider Name, and the url for the engine.
      • Disable - Do not allow searching.
      • User Choice - Allow users t select their own search provider .
    4. Click Set.

    Auto-Launch External Applications

    Support for Prisma Access Browser Extension only.
    The Prisma Access Browser Extension provides an auto-login feature that offers users a seamless and automatic sign-in experience, eliminating the need for manual authentication. The feature is available only when you integrate it with the following Identity Providers (IdP):
    • Okta
    • Azure Active Directory
    • Google Workspace
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Auto-Launch External Applications.
    3. Select one of the following options:
      • Allow - Permit the use of Auto-Launch External Applications.
        • Protocol - Enter the protocol in the proper format. The format is displayed on the control.
        • Add Origin - Enter the Origin patterns for the protocol. The format is displayed on the top of the page.
      • Block - Do not allow Auto-Launching External Applications.
    4. Click Set.

    Desktop Sharing

    Mobile Browser - No support
    When this feature is enabled, users will be granted the ability to share their screens when they are using the sharing tools from within a browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Desktop Sharing.
    3. Select one of the following options:
      • Allow - Allows you to enable end-users to share their desktop screens or desktop applications.
      • Block - Block end-users from sharing their desktop screens or desktop applications.
    4. Click Set.

    © 2025 Palo Alto Networks, Inc. All rights reserved.