Browser
macOS browser updates are generated within the user context (not a separate
updater). Updates will only occur when the Browser is open.
Windows installations (with autoupdate), install both the Browser and an
updater service agent. This agent runs separately from the Browser and is triggered
by a System Scheduled Task.
When a machine is running, even without a user logged in, the scheduled
task will make periodic update attempts to check if an update exists. If the check
is successful, it will download a Browser update that will be applied on the next
Browser start/restart. The amount of time the user can delay the update and the
update schedule window are configurable via a Browser Customization policy in the
management console.
When the user accesses the “About” page, the update service will manually
attempt to perform an update. In this case, the Browser polls the update service
(COM Server) and reports to the user if an update is available to install. A user
can't force an update that is beyond the version configured by the currently applied
policy.
For managed deployments, the MSI deployment should happen at a system
level, therefore proxies available to system-level processes will be used. It's
possible that a download mitigation action will occur if system-level traffic is
blocked. Validate nominal updates or create an exception for the browser with this
enabled.
Offline installers can be provided for exact versions of the browser and
are posted in the RSS feed listed above.
The Browser will poll for new updates every few hours.
Full Browser updates contain the latest engine within it.
If a policy is available (and the user has logged in), The Browser
will install updates based on the policy (if configured)
If a policy isn't updated (either because the user has not logged
in or the user had not logged in recently and the policy is stale), the
service will update the browser to the version that is in written in the
following registry key:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Palo Alto
Networks\PrismaAccessBrowserPolicies]
"TargetVersionPrefix{DFEF2477-4F0E-454B-BC0D-03CE61074E4C}"="1.1.1.1"
New browser updates are a full install, which is approximately
~
128 mb unpacked.
