topic Re: Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers? in Prisma Access Discussions

Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers?

H.Chou070210 — Wed, 09 Apr 2025 04:03:02 GMT

Hello all,

Is it possible to enforce the use of PAB and block connections from other browsers?

The inability to restrict access to only PAB allows other browsers to connect, introducing a potential security vulnerability.

Re: Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers?

emr_1 — Wed, 09 Apr 2025 04:45:33 GMT

If you are talking about the situation that users need to be enforced to use PAB when accessing to private (corporate)'s app, then refer to following:
https://docs.paloaltonetworks.com/prisma-access-browser/integrations/ip-based-enforcement

If you are talking about any websites on the internet, it is impossible.

(You need to think about enforcement by GPO, MDM, or something else)

Re: Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers?

vinohtkumar — Fri, 11 Apr 2025 05:34:04 GMT

the only way is to block all browser through uem, mdm, gpo and force the user to use PAB. if you want to force it for private app you can go ahead with ip base enfrocement and your private app should be capable of ip based access like conditional access etc.