topic Re: Prisma Access Browser in Prisma Access Discussions

Prisma Access Browser

DickyAnggara — Tue, 11 Feb 2025 09:52:27 GMT

We will now deploy the prism access browser. Can the user access the internal application directly through the prisma access browser via a service connection? Or does it still need to connect to Global protect Mobile users?

Re: Prisma Access Browser

Vickynet — Wed, 26 Feb 2025 02:55:06 GMT

@DickyAnggara wrote:

We will now deploy the prism access browser. Can the user access the internal application directly through the prisma access browser via a service connection? Or does it still need to connect to Global protect Mobile users?

@DickyAnggara , When deploying the Prisma Access Browser, users can access internal applications through a service connection without a need for Global Protect Mobile Users but there is a need for Explicit Proxy for this to be accomplish. Access to your Internal applications could either via GP or Explicit Proxy. I hope that is helpful.

Re: Prisma Access Browser

DickyAnggara — Thu, 27 Feb 2025 03:49:09 GMT

Can we force gp users to only use the PAB browser? Can we set it through the policy mobile users - GP?

Re: Prisma Access Browser

Vickynet — Fri, 28 Feb 2025 16:32:00 GMT

@DickyAnggara wrote:

Can we force gp users to only use the PAB browser? Can we set it through the policy mobile users - GP?

@DickyAnggara , Yes, you can and there are several enforcement options available:

For managed devices, enforcement can be implemented via MDM/Cortex.
Header or user-agent checks (less preferred, but an option).
IDP proxy.
PABX

I hope you find this helpful.

Re: Prisma Access Browser

DickyAnggara — Wed, 05 Mar 2025 04:26:41 GMT

Thanks VIckynet.

Currently we build 1 service connection with 2 ipsec tunnels primary and secondary. However, for the secondary tunnel is not up, Phase 1 phase 2 has matched and there is no blocking.

Is the secondary ipsec tunnel behavior up if the ipsec tunnel is down? or must both be up first.