Suspend a Prisma Browser Device
Table of Contents
Suspend a Prisma Browser Device
Immediately revoke access to Prisma Browser on a specific Desktop device by
suspending it. Optionally wipe local browser data or abort a pending wipe.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
|
Use device suspension to revoke browser access on a specific device without affecting
the user's other devices. This is useful when a device is compromised, lost, or
no longer authorized.
Use device suspension as a remediation action when you need to revoke access to a
specific device without affecting the user's access to their other devices. This can
happen in one of the following circumstances:
- The device is lost.
- The device is compromised.
- The device is no longer authorised.
Suspended users see a block page informing them that an administrator suspended their
access to the browser.
| Desktop | Extension | Mobile |
|---|---|---|
| Yes | No | No |
Suspend a Device from the Devices Page
Suspend a specific device directly from the Devices management page.
- In the management console, navigate to .Locate the device you want to suspend and click the actions menu (⋮).Select Suspend device.If the Suspend & wipe device option appears, this indicates the wipe capability is enabled for your tenant.In the confirmation dialog, review the impact statement.The statement confirms that the selected device of the specified user will be immediately suspended, and the user will not be able to use the device afterwards to access the browser.
![]()
(Optional) Select the Wipe all local device data checkbox to clear local browser data upon suspension.Wiping clears cookies, cache, bookmarks, browsing and download history, passwords and passkeys, autofill data, and site settings. Data re-syncs if the device is later resumed.Click Suspend to confirm.The device status changes to suspended (or suspendedWipe if wipe was selected). The device displays the suspension block page.Suspend a Device from the User Drawer
Suspend a specific device from within a user's details drawer.- Navigate to .Click on the user whose device you want to suspend to open their details drawer.In the user drawer, locate the device in the devices list and click the actions menu (⋮) for that device.Select Suspend device (or Suspend & wipe device).Review the confirmation dialog and click Suspend.The device is immediately suspended. The user's other devices remain unaffected.
Wipe Local Data from a Suspended Device
After suspending a device, you can wipe its local browser data.The device must already be in suspended status. If the device is active, use the suspend action with the wipe checkbox instead.Wiping clears cookies, cache, bookmarks, browsing and download history, passwords and passkeys, autofill data, and site settings. This action bypasses draft mode.- Navigate to .Locate the suspended device and click the actions menu (⋮).Select Wipe device data.Confirm the wipe action in the dialog.The device status changes to suspendedWipe. Local data is cleared on next device connection. Data will re-sync if the device is later resumed.
Abort a Pending Wipe
Cancel a pending wipe operation on a suspended device before it executes.The device must be in suspendedWipe status and the wipe must not yet have been executed on the device.Aborting a wipe transitions the device from suspendedWipe back to suspended. The device remains suspended but its local data is preserved.- Navigate to .Locate the device with pending wipe and click the actions menu (⋮).Select Abort wipe.In the confirmation dialog, review the message confirming that the device will not be wiped but will remain suspended.Click Abort wipe to confirm.The device status returns to suspended. The wipe operation is cancelled and local data is preserved.
Resume a Suspended Device
Restore access to Prisma Browser on a suspended device.- Navigate to .Locate the suspended device and click the actions menu (⋮).Select Resume from suspend.Click Resume to confirm.The device status returns to active. The block page is dismissed and the user regains access. If data was wiped, it re-syncs automatically.
What the End User Sees
When a device is suspended, the Prisma Browser Desktop on that device displays a block page.The user sees the following on the suspended device:- Title: "An admin suspended access to the browser"
- Description: "Please contact administrator for further details"
- A Retry button that re-checks suspension status
The block page persists until an administrator resumes the device. The user's other devices (including other Desktop devices) are not affected by a single device suspension.Audit Trail
Device suspension and resume actions generate audit events for compliance tracking.The following audit events are logged when device suspension actions are performed:Audit Events Action Audit Event Details Suspend device DeviceSuspended (56) Records device ID, administrator, and whether wipe was requested Resume device DeviceResumed (57) Records device ID and administrator Device Status State Machine
Valid device status transitions for suspension-related actions.Valid Status Transitions Action From Status To Status Notes Suspend active suspended Immediate effect Suspend with wipe active suspendedWipe Wipe executes on next device connection Wipe (post-suspend) suspended suspendedWipe Add wipe to already-suspended device Abort wipe suspendedWipe suspended Cancels wipe; device stays suspended Resume suspended active Access restored; data re-syncs if wiped Resume suspendedWipe active Access restored; data re-syncs Considerations
Important details and limitations for device suspension.- Device suspension applies only to Prisma Browser Desktop. Extension and mobile devices cannot be individually suspended.
- Suspension takes effect immediately — the user does not need to restart the browser on the affected device.
- Suspension bypasses draft mode — changes apply immediately without requiring a publish action.
- Suspending a single device does not affect the user's other devices.
- The abort wipe option is only available while the wipe is pending. Once the device connects and the wipe executes, it cannot be reversed.
- If wipe is selected, local data (cookies, cache, bookmarks, history, passwords, autofill, site settings) is cleared. Data re-syncs upon resume.
- Archived devices cannot be suspended.
- To suspend all devices for a user at once, see Suspend a Prisma Browser User.
