Remote Browser Isolation
What's New in Remote Browser Isolation
Table of Contents
What's New in Remote Browser Isolation
Review the new features in Remote Browser Isolation (RBI).
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Review the latest feature updates for Remote Browser Isolation (RBI) along with the Prisma Access
versions needed for the features. You can also see what's new in the NetSec platform.
- What's New in RBI 2.8
- What's New in RBI 2.7
- What's New in RBI 2.6
- What's New in RBI 2.4
- What's New in RBI 2.3
- What's New in RBI 2.1
- What's New in RBI 2.1 China
- What's New in RBI 2.0
Compatible Prisma Access Versions for Remote Browser Isolation Features
Unless otherwise stated, Remote Browser Isolation (RBI) 2.8 requires Prisma Access 5.2.1 or
later, including any innovation or preferred release.
The following table shows the Prisma Access dataplane versions that are compatible
with RBI features.
| RBI Features | Minimum Required Dataplane Version |
|---|---|
| RBI 2.8 | |
| Expanded Custom File Type Support in RBI Isolation Profiles |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI In-Browser Translation for China Deployments |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI 2.7 | |
| Enhanced Print Options for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI 2.6 | |
| Dynamic Language Detection for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI 2.4 | |
| In-Browser Translation for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI 2.3.1 | |
| Print with Header and Footer for RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI 2.3 | |
| Granular File Transfer Controls in RBI |
PAN-OS 11.2.4
PAN-OS 10.2.10
|
| RBI 2.1 | |
|
Host Information Profile Support for Policy Enforcement Along
with RBI Functionality
Language Localization for Isolated Traffic
On-Premises Active Directory Support for RBI
| PAN-OS 11.2.4 |
| All other features | PAN-OS 10.2.10 |
| RBI 2.1 China | |
| RBI in China | PAN-OS 11.2.3 |
| RBI 2.0 | |
|
Mobile Support for RBI
Browser Support for RBI
|
PAN-OS 11.2.0
PAN-OS 10.2.9
|
|
Third-Party CDR Integration for Remote Browser Isolation
|
PAN-OS 11.2.0
|
| RBI 1.3 | |
| Maintenance release |
PAN-OS 11.2.0
PAN-OS 10.2.9 (hotfix 2)
|
| RBI 1.1 | |
| Maintenance release | PAN-OS 10.2.8 |
| RBI 1.0 | |
| Initial release | PAN-OS 10.2.8 |
RBI supports isolated browsing in most of the popular web browsers on desktop and mobile
devices.
What's New in RBI 2.8
Expanded Custom File Type Support in RBI Isolation Profiles
|
October 31, 2025
Supported in:
|
Organizations face challenges when balancing security and productivity needs for file
transfers during Remote Browser Isolation (RBI) web browsing sessions. This feature
addresses this problem by greatly expanding the number of supported custom file
types from 5 to 50 in a single isolation profile, which gives administrators greater
flexibility to define granular policy rules for which file types users can upload or
download during isolated browsing sessions.
With the significant increase in custom file types for download and upload in RBI
isolation profiles, you can precisely tailor your file transfer controls
policy rules to your organization's specific requirements. This expanded capability
is valuable for enterprises with complex file handling needs, such as financial
institutions or organizations that work with specialized document formats. The
feature works seamlessly with your existing RBI deployment and provides greater
flexibility and control of file transfers during isolated browsing sessions.
RBI In-Browser Translation for China Deployments
|
October 31, 2025
Supported in:
|
Remote Browser Isolation (RBI) now provides translation capabilities within RBI
sessions specifically designed for deployment in China, enabling your end
users to translate web content to their preferred language through integrated
translation services. When your users browse to a website containing content in a
language different from their browser's preferred language setting, they can
right-click to access a context menu option that translates the entire webpage to
their preferred language.
Your users can use this feature when conducting business workflows that require
accessing websites in foreign languages while maintaining the security benefits of
isolated browsing. This is valuable for organizations operating in China where
access to certain translation services are restricted but
translation capabilities remain essential for productivity. The feature ensures that
language barriers do not prevent your users from accessing necessary web resources
while keeping the network protected through RBI's isolation architecture. Your users
can seamlessly translate content without compromising the security posture that RBI
China provides, as all translation processing occurs within the isolated browser
environment before being rendered in their local browser.
What's New in RBI 2.7
Enhanced Print Options for Remote Browser Isolation
|
September 26, 2025
Supported in:
|
When printing from isolated webpages in Remote Browser Isolation (RBI), your users
might need access to standard browser print options to support their daily business
workflows. RBI's enhanced print options address this need
by providing a comprehensive set of print settings that closely match the native
browser experience.
Comprehensive Print Settings While Printing an Isolated Page
When printing an isolated webpage, users can now access and modify a full range of
print settings similar to those available in their local browsers. They can select
typical print options such as layout orientation, paper sizes, print scale, and
include or exclude header and footer information.
Date and Time Format in Print Headers
The date and time displayed in print headers now automatically match the local
browser's format settings, ensuring that printed documents maintain consistency with
your users' regional preferences.
Retain Web Links in Saved PDF
When saving isolated web content as a PDF, RBI now preserves hyperlinks from the
original webpage in the output document. This enhancement enables users to generate
documents that maintain their interactive functionality, enabling them to access
linked resources directly from the PDF.
These print enhancements significantly improve the usability of RBI for business
workflows that require high-quality printing of web content while enforcing your
organization's security policies through isolation.
What's New in RBI 2.6
Dynamic Language Detection for Remote Browser Isolation
|
August 29, 2025
Supported in:
|
Dynamic language detection for Remote
Browser Isolation (RBI) automatically recognizes and adapts to your end users'
browser language preferences to provide a seamless multilingual experience during
isolated browsing sessions. This feature consists of two complementary capabilities
that work together to ensure both the RBI user interface and the websites your users
visit respond appropriately to their language settings. The system uses your users'
browser native language configuration to determine their preferred language and
applies this information to their isolated browsing experience. You don’t need to
configure these features as they activate automatically when your users access RBI,
detecting their browser language settings and applying them consistently throughout
their sessions.
Dynamic Language Detection for RBI End-User Notifications
When your users access Remote Browser Isolation (RBI), the system automatically
detects their browser's preferred language settings and displays the RBI interface
elements in their native language. This feature eliminates the confusion and
security risks that arise when critical system notifications, error messages, and
RBI interface components appear only in English for non-English speaking users. The
system reads your users' browser language preferences and renders all RBI
notification elements including buttons, labels, messages, dialogs, alert
notifications, and floating action button texts in their preferred language.
If your users' browsers have multiple languages configured, RBI uses the primary
language setting as the default. When RBI does not support your users' preferred
language, all interface elements automatically fall back to English to ensure
consistent functionality. RBI currently supports Japanese, Chinese (Simplified),
Chinese (Traditional), and Korean languages alongside English for end-user
notifications.
Your users benefit from this feature because it reduces the likelihood of ignoring
important security warnings due to language barriers and improves their overall user
experience when accessing isolated web content. This language detection operates
independently of your users' main website language settings. Website language
changes or browser translation actions don’t affect the RBI interface language,
which remains tied to their browser's preferred language configuration.
Dynamic Language Detection for Native Language Browsing
RBI automatically detects and synchronizes your end users' browser language
preferences to ensure websites serve content in their native languages during
isolated browsing sessions. This capability addresses the issue where RBI would only
send English language preferences to web servers regardless of users' actual browser
configurations, which caused websites to always return English-language content even
when users configured different preferred languages in their browsers.
You will benefit from this feature when your organization has a global workforce that
regularly accesses multilingual websites, international corporate applications, or
cloud services that adapt content based on browser language settings. The system
reads the language preferences from each user's browser and forwards the complete
language preference list to destination web servers in the user's configured
priority order. This ensures that users accessing Japanese corporate portals,
Chinese e-commerce sites, or European government websites receive content in their
expected languages rather than defaulting to English versions.
The language detection operates transparently without requiring any configuration
changes to your RBI deployment or user browsers. When the system can’t determine
language preferences, it defaults to English to maintain reliable operation. This
capability functions across all supported platforms and browsers, preserving the
natural multilingual browsing experience your users expect while maintaining the
security isolation that protects your organization from web-based threats.
What's New in RBI 2.4
In-Browser Translation for Remote Browser Isolation
|
June 27, 2025
Supported in:
|
Remote Browser Isolation (RBI) web translation enables your users to
translate webpage content directly within their isolated browsing sessions without
compromising security. When users access websites through RBI, they can now use the
context menu to translate an entire webpage or selected text portions into their
browser's preferred language. The feature integrates
cloud translation services with the remote
browser running in the RBI infrastructure, preserving the native browser translation
experience users expect from local browsing.
Users configure their preferred language through the local browser's language
settings, and RBI automatically detects this preference to offer appropriate
translation options. When users encounter content in a foreign language, they can
right-click on the page to access the translate option in the context menu, which
will convert the entire webpage to their preferred language. For specific text
segments, they can highlight the content and right-click on the page and select the
option to translate only the selected portion, with results displayed in a
translation widget.
The translation feature proves valuable for global organizations where employees
regularly access content in multiple languages as part of their daily workflows.
Users can configure automatic translation settings for specific websites, enabling
frequently visited foreign language sites to translate automatically upon loading
(applicable only if the cache clearing option is not enabled on the tenant). This
feature supports all major world languages available through
the cloud translation service and maintains translation preferences across RBI
sessions.
What's New in RBI 2.3.1
Print with Header and Footer for Remote Browser Isolation
|
June 13, 2025
Supported in:
|
The print with header and footer feature
enables users to include header and footer information when printing webpages
rendered via Remote Browser Isolation (RBI). When using RBI, the standard print
options, such as pressing Ctrl+P, using the default context
menu, or selecting in-page print options, don’t include headers and footers in the
printed output. To enhance the print functionality, RBI now includes a dedicated
option in the context menu to print headers and footers in web content.
RBI users can access this feature by right-clicking on the page while in an isolated
browsing session and selecting Print (with Header/Footer)
from the context menu. The feature is available across all desktop and mobile
devices that support RBI, ensuring consistent printing functionality regardless of
the device RBI users are using.
What's New in RBI 2.3
Granular File Transfer Controls in Remote Browser Isolation
|
May 30, 2025
Supported in:
|
Previously, Remote Browser Isolation (RBI) limited administrators to allowing or
blocking all downloads or all uploads during isolation, regardless of file type.
This lack of flexibility forced administrators to choose between allowing all file
transfers, which could lead to security issues, or blocking all file transfers,
which could result in usability issues and user dissatisfaction.
You can now use isolation profiles in RBI to specify the types of files users can upload or
download, enabling more granular control over data transfers during
isolated browsing sessions. The new capability helps to enhance the security posture
by reducing the attack surface and preventing various types of cybersecurity
threats. It also helps in data exfiltration by controlling which categories of file
types a user is able to upload.
Key use cases include permitting users to download only document files, blocking
downloads of executable files, or permitting transfers of only specific approved
file types. The granular controls enable you to balance security and usability by
tailoring allowed file types to your organization's needs. Configuring file type
filtering enhances your data loss prevention capabilities and provides an additional
layer of protection against potential threats introduced through file transfers.
What's New in RBI 2.1
Host Information Profile Support for Policy Enforcement Along with RBI Functionality (Innovation Release)
|
February 7, 2025
Supported in:
|
You can now leverage host information profiles to enhance your policy enforcement
capabilities while utilizing Remote Browser Isolation (RBI). This feature allows
for the use of host information profiles for policy enforcement, such as
specific machine identification, and routing traffic through isolation.
Language Localization for Isolated Traffic (Innovation Release)
|
February 7, 2025
Supported in:
|
You can now take advantage of language localization support for isolated traffic
using the Prisma Access Edge regions and locations framework. This feature
enhances your ability to deliver a tailored browsing experience to users across
different geographical areas while maintaining the security benefits of traffic
isolation. It ensures that web content accessed through isolation is presented
in the appropriate language based on the user's location or preferences.
Enhanced Near-Native Experience for RBI
|
February 7, 2025
Supported in:
|
RBI provides comprehensive out-of-the-box support for Chromium-based widgets and
context menus, delivering an improved user experience. This includes improved
functionality for common actions like Ctrl+F search and
right-click options similar to a native browser.
On-Premises Active Directory Support for RBI
|
February 7, 2025
Supported in:
|
What's New in RBI 2.1 China
Remote Browser Isolation in China
|
September 30, 2024
Supported in:
|
Remote Browser Isolation (RBI) is available in China to protect your users' managed
devices from malware and potential zero-day attacks that result from standard web
browsing activity. RBI in China works with Prisma® Access in
China to isolate and transfer all browsing activity to the cloud-delivered platform.
This ensures that potentially malicious code and content are secured and isolated
away from your users' managed devices and the corporate network. This approach
dramatically strengthens your security posture against highly evasive threats,
especially those originating from risky websites.
Furthermore, the core capabilities available in RBI in China are the same as the RBI
capabilities for the rest of the world, ensuring a consistent user experience
globally, and the procedures for configuring RBI in China are identical to existing
RBI configurations.
What's New in RBI 2.0
Mobile Support for Remote Browser Isolation
|
July 26, 2024
Supported in:
|
Remote Browser Isolation (RBI) now supports Android, iOS, and iPadOS devices for
isolated browsing to help broaden the device support for your managed users. You
can view the combination of supported operating systems and
browsers that your users can use for isolated browsing.
Browser Support for Remote Browser Isolation
|
July 26, 2024
Supported in:
|
Remote Browser Isolation (RBI) now supports the Mozilla Firebox browser for
isolated browsing on macOS and Windows desktop operating systems, as well as
Android, iOS, and iPadOS mobile operating systems. You can view the combination
of supported browsers and operating
systems that your users can use for isolated browsing.
Third-Party CDR Integration for Remote Browser Isolation
|
June 28, 2024
Supported in:
|
Protect your users against zero-day threats hidden in files that they download from
the internet by integrating Remote Browser Isolation (RBI) with a
third-party content disarm and reconstruction (CDR) provider.
When users browse the web and download various types of files to their local devices,
they are exposed to zero-day threats. Even with file scanning or antivirus solutions
in play, these threats could escape detection, allowing malware to be delivered to
your users’ managed devices and rendering them as patient-zero.
With third-party CDR integration, any files downloaded while in RBI will be disarmed
and reconstructed using CDR. The CDR provider will remove the malicious content from
the files and deliver the sanitized files in their original file formats to the
user.
You can integrate with Votiro to utilize Votiro's
CDR capabilities to process and appropriately sanitize a file before it is
downloaded to the user’s device from RBI, thus keeping the user protected from any
potentially malicious executables embedded in the file.