The online installer is a stub that fetches the latest version of the Prisma Access Browser and installs it.
The online installer automatically retrieves the latest version of the
browser from either the Stable or Long-Term Support (LTS) channel. The browser
package includes an integrated updater that applies updates according to the
"Deployments" settings specified in the policy manager under "Browser
Customizations." Administrators can configure upgrade requirements and scheduling
per individual users or user groups by adjusting the relevant policies.
The installers for Windows and Mac are available here:
Windows MSI
The MSI installer uses the standard Microsoft Windows switches for silent
installation.
Offline installers consist of a standalone installation file that enables browser
installation on systems without an internet connection. The development team
updates and releases the installers with each new browser version. The version feeds
contain only recent and supported browser versions. We strongly recommend that you
install the latest version to ensure access to all security updates.
updated and released with each browser version.
Windows
You can install the browser while offline using a dedicated MSI.
MSI options
You can customize the installation using the following parameters:
CHECK_ADMIN_POLICY_BEFORE_UPGRADE: Pins the version and
prevents the updater from updating to the latest version until a
user logs-in and receives a fresh policy. Default: false
The browser follows a weekly update schedule aligned with Chrome’s release
cycle, which includes weekly security patches and a major version update with new
features approximately every month.
Administrators can select between two release channels through the
deployment policy:
Stable Channel (default): Receives weekly updates that include both new
features and security patches.
Long-Term Support (LTS) Channel: Receives weekly security patches and new
Prisma Access Browser and Chromium features only during the monthly major
version updates.
The Deployment policy in the management console allows customization
of the deployment delay for new features and configuration of the update enforcement
schedule.
Updates downloaded during the update process are applied at the next
browser start or restart. Active browser sessions will display a notification
prompting users to restart their browsers to apply the update.
macOS
For macOS devices, browser updates are currently managed within the browser
context. The update process initiates only while the browser is running and operates
using the active user's permissions.
This process will be updated with the upcoming introduction of the Prisma Access Browser Updater for macOS.
WINDOWS - Windows Installations with Auto-Update
Windows installations configured with auto-update include both the browser
and an updater service agent. This agent operates independently of the browser and
is triggered by a system-level scheduled task.
Background Updates: When the machine is powered on, the scheduled task
periodically checks for new browser versions, even if no user is logged in.
Manual Update Check: Users can manually trigger an update check by
navigating to the About page at prisma://settings/help. If an update is
available, the update service will notify the user and provide the option to
install it.
Engine Updates
All versions of the browser will update the engine component automatically. These
are rolled out gradually to the entire user-base and are not configurable by
policy. This is required for browser functionality and to get the latest
updates, fixes, and policies.
