Prisma Access Browser_How to enforce the use of PAB and block connections from other browsers?

[H.Chou070210]

Hello all,

Is it possible to enforce the use of PAB and block connections from other browsers?

The inability to restrict access to only PAB allows other browsers to connect, introducing a potential security vulnerability.

[emr_1 · Accepted solution]

If you are talking about the situation that users need to be enforced to use PAB when accessing to private (corporate)'s app, then refer to following:
https://docs.paloaltonetworks.com/prisma-access-browser/integrations/ip-based-enforcement

If you are talking about any websites on the internet, it is impossible.

(You need to think about enforcement by GPO, MDM, or something else)

[vinohtkumar · Accepted solution]

the only way is to block all browser through uem, mdm, gpo and force the user to use PAB. if you want to force it for private app you can go ahead with ip base enfrocement and your private app should be capable of ip based access like conditional access etc.