>
    Configure Prisma Access Browser Browser Customization Controls
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access Browser
    3. Manage Prisma Access Browser Policy Profiles
    4. Configure Prisma Access Browser Browser Customization Controls
    Download PDF
    Prisma Access Browser

    Configure Prisma Access Browser Browser Customization Controls

    Table of Contents

    Configure Prisma Access Browser Browser Customization Controls

    Configure browser customization controls for Prisma Access Secure Enterprise Browser (Prisma Access Browser).
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Prisma Access Browser standalone
    • Prisma Access with Prisma Access Browser bundle license or Prisma Access Browser standalone license
    • Superuser or Prisma Access Browser role
    When you're creating a browser customization rule, you can configure the controls in the following ways:
    • When you're creating a new browser customization rule, you can set the controls in the Browser Customization page.
    • You can edit an existing rule.
    • When you create a policy profile, you can configure browser security to control user security settings in the Prisma Access Browser.
    • You can select it from Strata Cloud Manager ManageConfigurationPrisma Access BrowserPolicyProfilesBrowser Customization.
    The following topics only display one way.

    Browser Customization – Branding

    Theme Color

    Mobile Browser - Partial support
    The Prisma Access Browser allows users to modify the browser theme color. You can choose to let users select their own favorite color if they desire. Choose a specific color from a color palette, or enter colors based on the following color codes:
    • R G B
    • H S L
    • HEX
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Theme Color.
    3. Select one of the following options:
      • Users choose their own - allows users to select their own color.
      • Custom color - allows you to set the color scheme.
    4. Set.

    Brand Color

    Mobile Browser - Partial support
    You can select a color that will be applied according to all user-facing browser elements. This includes dialogs, block pages, and other elements.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Brand Color.
    3. Select one of the following options:
      • Default color – Prisma Access Browser will use the default color for browser elements.
      • Custom color - You can select a custom color for browser elements.
        When selecting an accessible color, You should avoid indicative colors, such as red or green.
        For more information on accessible colors, refer to WebAIM.
    4. Set.

    Company Logo

    Mobile Browser - Full support
    The Prisma Access Browser allows you to select your own logo to increase branding awareness. The logo appears on the homepage, in messages sent to the users, and in the Browser Control Pane.
    You can add a company logo, or no logo to leave the default Prisma Access Browser Logo.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Company Logo.
    3. Select one of the following options:
      • No Company Logo - The default Prisma Access Browser logo will be displayed.
      • Set Company Logo- Drag the logo image or browse for it.
        The logo image must conform to the following requirements.
        • File format - PNG or SVG only
        • Recommended width - 600 px
        • File size - up to 1 MB
        • The logo should be transparent (no background).
    4. Set.
    5. The logo will now be displayed on the homepage and all places where the logo is used.

    Company Name

    Mobile Browser - Fukk support
    You can use the Company Name feature to add the organization's name to the top line of the browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Company Name.
    3. Select one of the following options:
      • Display no name - the display will show - Secure Browser - Powered by Palo Alto Networks.
      • Set name - Enter the name that is to be displayed on the top of the homepage. It will appear as The <company name> browser - Powered by Palo Alto Networks.
    4. Set.
    5. The name will now be displayed on the homepage and elsewhere.

    Custom Texts

    Mobile Browser - No support
    You can modify the default texts that appear in user-facing dialogs and other pages. This can help describe additional information regarding policies - for example - why a particular policy isn't allowed, and if there is anything that can be done to allow for special permission.
    This feature can also be used for localizing the information if required.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Custom Texts.
    3. Select one of the following options:
      • Use default dialog text - the dialog texts will be the default, preconfigured texts.
      • Customize and edit dialog texts - Select the dialog that you want to edit, and click the pencil icon. In the Edit Text window, edit the Title and Description. If needed, add new line characters to provide some formatting.
        There are two tabs for this option - Dialog texts and Security texts.
      • Add link - Enter the information for the Link name (up to 30 characters), and add the URL.
      • Set name - Enter the name that is to be displayed on the top of the homepage. It will appear as The <company name> browser - Powered by Palo Alto Networks.
    4. Save.
    5. Repeat and edit or customize as many additional dialogs as needed.
    6. Save when all dialogs are modified.

    Browser Icon

    Mobile Browser - No support
    This feature is only available on macOS.
    Organizations that use the Prisma Access Browser can use their own internally designed icon if they so desire. If not, you can make sure that only the default Prisma Access Browser icon is used.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Browser Icon.
    3. Select one of the following options:
      • Use Prisma Access Browser icon - The Prisma Access browser will use the default icon.
      • Set browser icon - You can select a custom icon.
    4. Set.

    Browser Customization – Analytics

    Autonomous Digital Experience Management (ADEM)

    This feature controls the ability to install or uninstall the ADEM plugin.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Autonomous Digital Experience Management.
    3. Select one of the following options:
      • Activate - Allow the installation of the ADEM plugin.
      • S - Allow the uninstallation of the ADEM plugin.
    4. Set.

    Browser Customization – Customization

    Incognito

    Mobile Browser - Full support
    This feature allows you to control whether or not the Prisma Access Browser can be opened in Incognito mode. A user in Incognito mode is anonymized from the Web only. Admin visibility and Browser Policies are not affected by this feature. You can set Access & Data Control rules to allow access to personal websites without logging.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Incognito.
    3. Select one of the following options:
      • Allow - Permit use of Incognito mode in Prisma Access Browser.
      • Block - Block use of Incognito mode in The Prisma Access Browser.
    4. Set.

    Extension Force Install

    Mobile Browser - No support
    This feature allows you to configure specific extensions that are to be installed automatically in the Prisma Access Browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Extension Force Install.
    3. Select the Store that is the source of the extension. The options are:
      • Chrome Web Store.
      • Custom URL. Enter the URL.
    4. Select whether the extension will be pinned to the toolbar for the end users. .
    5. Select whether the extension will be automatically installed in Incognito mode.
    6. If applicable, enter the Custom Configuration.
    7. Add.

    User-Agent

    Mobile Browser - Full support
    The User-Agent feature allows you to add additional Agent components to the default User-Agent string to identify the Prisma Access Browser HTTP/S requests.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select User-Agent .
    3. Select one of the following options:
      • Use default User-Agent - Use the default User-Agent string when identifying requests from the Prisma Access Browser. This is the same as the Chrome User-Agent
      • Set an additional User-Agent component - Configure an additional User-Agent for the Prisma Access Browser by entering the component name in the appropriate field.
      • User-Agent desktop mode - Allows you to ensure that applications that do not function properly in mobile browsers open in desktop mode.
    4. Set.

    Custom HTTP Header

    Mobile Browser - No support
    Custom HTTP headers let the browser pass additional information along with HTTP/S requests. An HTTP header consists of its case-insensitive name followed by a colon (:), then by its value.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Custom HTTP Header.
    3. Select one of the following options:
      • Don't add a custom HTTP header - Use the default setting, without any custom HTTP headers.
      • Set a custom HTTP header - Configure a custom HTTP header that will identify the Prisma Access Browser HTTP/S requests.
    4. Set.

    Profile Sync

    Mobile Browser - Partial support
    In some organizations, employees use the Prisma Access Browser on multiple devices. This feature enables you to synchronize profiles across all Prisma Access Browser installations on different devices.
    You have the option of customizing the browser settings to sync everything - all information that is associated with the user - or selecting specific information that will be included in the sync.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Profile Sync.
    3. Select one of the following options:
      • Enable- Allow a Profile Sync. You can select the following sync options:
        • Sync everything - select all the information that can be synchronized.
        • Customize sync - select the components that will be synchronized across multiple devices.
      • Disable - don't perform profile sync.
    4. Set.

    Default Browser

    Mobile Browser - No support
    This feature allows you to control whether Prisma Access Browser will be the default browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Default Browser.
    3. Select one of the following options:
      • Force - Set the Prisma Access Browser as the default browser without any user intervention.
      • Suggest user - Suggest that users select the Prisma Access Browser.
      • Don't suggest user - don't suggest using the Prisma Access Browser.
    4. Set.

    Onboarding Wizard

    Mobile Browser - No support
    This feature allows you to configure the Onboarding Wizard that is displayed to all new Prisma Access Browser users when they install the browser. The wizard assists end users in installing and configuring the Prisma Access Browser, and at the same time - displays a brief tutorial of some of the more popular features.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Onboarding Wizard.
    3. Select one of the following options:
      • Enabled - the Onboarding Wizard will be enabled for use. You will be able to select the steps that will be made available to the users.
        By default, all steps are enabled.
        1. In the Welcome (Step 1), you can either use the default message or enter a custom message for the users. The custom content allows 160 characters for a title and 320 characters as the message.
        2. In Step 2: Customize, users can add their picture. If you did not configure the Brand Color, users will be able to configure their own preferred color. If the Brand Color was configured, the color option won't be displayed.
        3. Step 3: Import allows users to import their existing resources including:
          • Bookmarks
          • Passwords
          • History
          • Cookies
          • Extensions installed
          • Extension Data
        4. Step 4: Labels and Policy indicator provides a brief description on how users can benefit from the displayed labels.
        5. Step 5: Popup extensions & Notifications encourages users to use the Prisma Access Browser icon to help manage their account.
        6. Step 6: Restrictions describes to users the way that Prisma Access Browser uses the restrictions in the browser.
        7. Step 7: Mobile & Sync informs users that the mobile application is a seamless extension of the desktop browser.
        8. Step 8: Feedback invites users to send their comments and suggestions.
      • Disabled - the Onboard Wizard won't be enabled.
    4. Set.

    Sidebar

    Mobile Browser - No support
    This feature allows you to control whether the users will be able to use the sidebar. The sidebar allows you to create shortcuts designed for end-users, so that they will be able to save time when using their regular/preferred applications. Users can also display or hide it on their own by opening the Control Pane and selecting Show Sidebar.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Default Browser.
    3. Select one of the following options:
      • Enable - the Sidebar will be enabled for use.
      • Disable - the Sidebar will be disabled from use.
    4. Set.

    Safe Search

    Mobile Browser - Full support
    When you enable the SafeSearch feature, you extend the URL filtering to include the selected search engines. .
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select SafeSearch.
    3. Select one of the following options:
      • Enable-Enable the featrure. You also need to select at least one of the available search engines to be used for safe search.
      • Disable- Disable the feature.
    4. Set.

    Browser Customization – Routing

    Proxy Auto-Configuration File

    Mobile Browser - No support
    This feature allows you to configure the Prisma Access Browser to use a Proxy Auto-Configuration (PAC) file to pass some of the web traffic through a proxy or gateway. This feature overrides the system PAC file.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Proxy Auto-Configuration File.
    3. Select one of the following options:
      • Set PAC File - Configure the Prisma Access Browser to use a PAC file.
      • No PAC File - Do not require a PAC file.
    4. Set.

    Traffic Flow

    Mobile Browser - Partial support
    The Traffic Flow control allows you to manage the way that the Prisma Access Browser handles network traffic.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Traffic Flow.
    3. Select one of the following options:
      • Only route private application traffic through Prisma Access.
      • Route all traffic through Prisma Access.
        Mobile Devices: To ensure an optimal experience with Network Detection and Prisma Access, either route only Private App traffic, or exclude the Mobile Device group from routing.
      • Do not route traffic through Prisma Access
    4. Set.

    Internal Network Detection

    Mobile Browser - Full support
    The Traffic Flow control allows you to configure network detection to ensure that traffic is routed in an optimal way
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Internal Network Detection.
    3. Select one of the following options:
      • Enable - Enable Internal Network Detection. Select and configure the methods.
        • Internal Host Detection - Identify the internal network by establishing a connection with a host that is only available inside the network. Enter the following information:
          • FQDN to resolve
          • Expected IP addresses
        • Agent detection - Identify the internal network by detecting whether the Global Protect or the Prisma Access agent is running on the device.
      • Disable - Disable Internal Network Detection.
    4. Click Set.

    Browser Customization – Homepage

    Homepage

    Mobile Browser - Full support
    This feature allows you to set a default homepage for the browser. This page will appear whenever a user opens the Prisma Access Browser or a new tab. This will help you create a unified look and feel across company resources.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Traffic Flow.
    3. Select one of the following options:
      • Prisma Access Browser Homepage - Use the default homepage that is included with the browser when it installs.
      • Custom URL- Enter the URL of the selected homepage in the format
        https://www.example.com.
    4. Optionally, select the option to Show home button on toolbar.
    5. Set.

    Managed Shortcuts

    Mobile Browser - Full support
    To improve the efficiency for the users, the Prisma Access Browser allows you to configure applications and URLs that will appear on the homepage. In most cases, these will be applications that will be the ones most commonly needed by users in their day-to-day routine. You have the ability to enter a specific URL, a name, and a customized icon, if desired.
    These links will also appear on the browser bookmark under Company Shortcuts, as well as on the desktop browser's sidebar.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Managed Shortcuts.
    3. Select one of the following options:
      • No Shortcuts - Do not include any managed shortcuts on the homepage.
      • Set Shortcuts - Click Add shortcut to add managed shortcuts to the homepage.
        1. Enter the URL.
        2. Enter a Name for the shortcut.
        3. Optionally select an icon for the shortcut. If no icon is selected, the website’s Favicon will be used.
    4. Set.

    Background Image

    Mobile Browser - Full support
    This feature allows you to select a custom background image for the Prisma Access Browser homepage.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Background Image.
    3. Select one of the following options:
      • Default background - Use the default background image that is included with the browser when it installs.
      • Dark background - Use a dark background image.
      • Light background - Use a light background image.
    4. If you do not want to use a background image, select No Background Image.
    5. Set Background image- Drag and Drop the Enter the URL of the selected homepage in the format.
      1. Select a file to use as the background image. The image should best conform to the following guidelines:
        • File format - PNG or JPEG.
        • Image size 2560 px wide x 1440 px height.
        • Maximum file size - 3 MB
    6. If you want to see how the Background image will be displayed on different devices, click the appropriate device in the Image preview section..
    7. You can either use the default filter option, or select a custom filter.
    8. Select the checkbox if you want to use the Color White Logo option. This will make the logo stand out on the homepage.
    9. Set.

    Admin Messages

    Mobile Browser - No support
    In many organizations, there is a challenge getting a message to all employees. The Prisma Access Browser offers a system for displaying messages on the homepage. The messages are displayed in a carousel - type display.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Admin Messages.
    3. Select one of the following options:
      • No admin messages - Do not display admin messages.
      • Set admin message- Click Add Admin Message and enter the following information:
        • Select a Title for the message.
        • Enter the Message text. The message size is limited to 1000 characters, and can also include links.
        • Click Add.
    4. On the main page, select Set. The message will be displayed on the homepage.

    Custom Notice

    Mobile Browser - Full support
    Only Palo Alto Mobile Browser supports this feature.
    Similar to Admin messages, this control allows you to send a message to all users who are using the Prisma Access Mobile Browser.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select Custom Notice.
    3. Select one of the following options:
      • Show notice - Display a custom notice for Prisma Access Mobile Browser users.
        • Select the frequency of the notice, ranging from Only once to Every 30 days. The default is Every 7 days.
          Note: If you uninstall and reinstall the browser, the frequency count restarts.
        • Enter a Title for the message.
        • Enter a Description for the message. The message is limited to 360 characters.
      • Don’t Show Notice - Do not display a custom message to Prisma Access Mobile Browser users.
      • Set admin message- Click Add Admin Message and enter the following information:
    4. Set.

    Browser Customization – Upgrade Enforcement

    Deployment Upgrade

    Mobile Browser - No support
    In the ever-changing world of cybersecurity, it is essential that the Prisma Access Browser be kept up to date, as updates and upgrades are added regularly. Upgrades are released weekly.
    Some organizations manage their upgrades using offline installers. For more information, please see The Prisma Access Browser Offline MSI Installer.
    When an update is available, a button will be displayed on the browser. A user can click the button or restart the browser to update the Prisma Access Browser. You can configure a Grace Period to allow end users some time to finish a task before running an upgrade. See below for more information.
    • New installations ALWAYS get the latest version.
    • There is no option to downgrade the browser.
    • Customers using offline installers won't be affected by this control.
    1. From Strata Cloud Manager, select ManageConfigurationPrisma Access Browser PolicyProfilesBrowser Customization
    2. Select .
      Deployment Upgrade
    3. Select one of the following options:
      • Latest version - the browser will be upgraded to the latest version when it is available. This is the default behavior.
      • Pinned version - the browser will upgrade to the selected version. You can select which version will be used for the upgrade. You can select pinned versions for both Windows and macOS. You decide which versions become the pinned version.
        • NOTE: When the pinned version reaches its end-of-life (usually after one month), the pinned version will be reset to a version released within the past 7 days.
        • When an update is available, a button will be displayed on the browser. A user can click the button or restart the browser to update. You can configure a Grace Period to allow end users some time to finish a task before running the upgrade. See below for more information.
      • Delayed release - automatically upgrade the browser to a version that was released within a selected number of days. The options are:
        • 7 days
        • 14 days
        • 21 days
        • 30 days
    4. Set the Upgrade schedule - click the upgrade schedule to configure the settings.
    5. Grace period - this is the time period that can be set for end-users to delay the upgrade, End users can finish their tasks (or save their work) before upgrading the Prisma Access Browser. The option for the Grace period ranges from 1 hour to 21 days. The default grace period is 1 hour.
      Do not enforce - do not require a forced upgrade of the Prisma Access Browser.
      The Force Upgrade option will be disabled when Do not enforce is selected.
    6. Force Upgrade - select the (local device) time when the upgrade will be forced to occur. The default is 02:00 - 04:00.
    7. Set.

    © 2024 Palo Alto Networks, Inc. All rights reserved.