Prisma Access Browser (PAB)

[DickyAnggara]

Hi guys

if we use a private connection (hotspot) and want to access internal applications using PAB is it possible? user conditions do not use vpn (GlobalProtect)

[nikoolayy1]

@DickyAnggara  I suggest to book a free workshop at Prisma Access Browser as to see Prisma Access browser in action like I did.

You can restrict source access based on your source ip that is the Firewall or proxy at your PAB as you can access for the entire browser("sign-in rules") or just to an application("location based policy").

Location-based Policy

Manage Prisma Access Browser Sign-in Rules

You can also make device groups based on different criteria as to allow only devices with the correct client ssl cert or managed by Intune or Azure AD etc. devices and only those devices to have access to your internal apps.

Configure Prisma Access Browser Device Posture Attributes

[DickyAnggara]

After configuring the sign rules, can users who are not connected to GlobalProtect and the internal network access internal applications or resources?

[nikoolayy1]

The answer to that question is yes as that is purpose of Prisma Browser. This is not just a browser as the traffic from it goes through Prisma Access gateways IP Based Enforcement 🙂