Deploy Prisma Access Browser Using Self-Service Methods

1. Direct users to the link https://get.pabrowser.com to proceed with browser installation.
2. Users will need to log in with their SSO credentials (after the administrator configures SSO).
3. For more information and getting started for end users, see the User Guide.

Deploy Prisma Access Browser Using Offline MSI Installer

1. Monitor the various support links and RSS feeds to monitor when updates are available.
2. Check them on your testing environment and when you're confident with the update, you can push the update to your users.

   The latest MSI Installer is available at Click here for the latest MSI Installer.

Deploy Prisma Access Browser Using Jamf

1. Open the Jamf Dashboard and select Settings.

   1. Select Computer ManagementScripts.
   2. On the Scripts page, select New.
   3. On the New Script page, on the General tab, enter the Display Name - a name for the script. Use any name that meets your organizational requirements.
   4. Select the Script tab.

      1. Install the Installomator script.
      2. Locate the line: DEBUG=1, and change it to: DEBUG=0.
         .
      3. Locate the label: prism9. Enter the following script before this label:

         pabrowser)
                                                     name="Prisma Access Browser"
                                                     type="dmg"
                                                     if [[ $(arch) != "i386" ]]; then
                                                     printlog "Architecture: arm64 (not i386)"
                                                     downloadURL=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable-a64/appcast.xml | grep -Eo 'url="(.*)"' | cut -d '"' -f2 | tail -n1)
                                                     appNewVersion=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable-a64/appcast.xml | grep -Eo 'sparkle:shortVersionString="(.*)"' | cut -d '"' -f2 | tail -n1)
                                                     else
                                                     printlog "Architecture: i386"
                                                     downloadURL=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable/appcast.xml | grep -Eo 'url="(.*)"' | cut -d '"' -f2 | tail -n1)
                                                     appNewVersion=$(curl -s https://bfe078e7921507bb.talon-sec.com/sparkle/PAB/stable/appcast.xml | grep -Eo 'sparkle:shortVersionString="(.*)"' | cut -d '"' -f2 | tail -n1)
                                                     fi
                                                     expectedTeamID="XZMH593AYG"
                                                     ;;

         .
      4. Click the Options tab. Under Parameter 4, enter the Application name. Select Save.
      5. The script is saved; you can now create a new Policy.
2. Create the Policy.

   1. In the Jamf Dashboard, select ComputersPoliciesNew.
   2. On the Policies page, select New.
   3. On the New Policy page, enter the Display Name for the policy.
   4. Select Scripts.
   5. In the Configure Scripts field, click Configure.
   6. On the New Policy page, select the Script and click Add.
   7. In the Parameter Values section, select the Application Name field, and enter pabrowser.
   8. Save.

      The Script is added to the policy.

Deploy Prisma Access Browser Using Intune

1. Open the Microsoft Intune Admin Center.
2. Select AppsAll apps.
3. Click + Add.
4. In the Select app type window, select Line-of-business app.
5. Click Select.
6. In the App information step, click Select app package file.
7. In the App package file window, browse to the MSI installation file, named PrismaAccessBrowserSetup.msi.
8. Click Ok.
9. Enter all the needed properties.

   1. Enter a name for the app. This will be visible in the Intune list and in the Company Portal.
   2. Provide a brief description of the app and its benefits for users. This description will be available in the Company Portal, where you can use rich text formatting to enhance it.
   3. Enter the name of the app’s publisher, which appears in the Company Portal.
   4. App install context – Select the Device.
   5. Show this as a featured app in the Company Portal – we recommend that you select Yes so that it will be easier for your users to find.
   6. Select the appropriate Logo for the application. Contact support for the correct file.
10. Click Next.
11. Select the Assignments for this app.

    1. For Available for enrolled devices, select Add group, and select the required Entra groups assigned to the application.
    2. If you select Add all users, then the Entra assignment will include all Entra users in your organization.
12. Click Next.
13. Review all the settings and click Create to create the new app, or Previous to make changes.

    Creating the app might take a few additional minutes. The application will be available for use after this step.

Deploy Prisma Access Browser Using Workplace ONE