| Prisma Browser Desktop | Prisma Browser Extension | Prisma Browser for Mobile |
|---|
| Full support | No support | Full support |
The Trusted Certificate Authorities control configures which TLS Trust
Stores Prisma Browser (PB) relies on to secure communications with backend services
and end-user web traffic. This mechanism establishes independent TLS trust
configurations to protect against network-level threats, prevent replay and
man-in-the-middle (MitM) attacks, and allow management of approved certificates when
TLS inspection exclusions cannot be applied.
Configurations and Use Cases
- Standard Deployments
- Default Configuration (Best Practice Exclusions Applied):
- PB Internal Services Traffic: PB Trust Store
- Browsing Traffic: Device Trust Store
- Full TLS Inspection (No Exclusions Permitted)
- PB Internal Services Traffic: PB Trust Store + Proxy CA
Certificate
- Browsing Traffic: Device Trust Store + Proxy CA
Certificate
- Specialized Deployments
- On-Site Professional Services (User/Group Policy Override):
- PB Internal Services Traffic: PB Trust Store + Customer
Proxy CA Certificate
- Browsing Traffic: Device Trust Store + Customer Proxy CA
Certificate
- Third-Party Contractors (Unmanaged Devices):
- Browsing Traffic: PB Trust Store
