After you have configured RBI and pushed the configuration to your endpoints, your users
can enter isolated browsing of websites that you have designated for isolation.
Before they begin isolated browsing, your users need to ensure that they are connected to
Prisma Access using one of the connection methods such as the GlobalProtect app.
When your users browse websites in categories that you designated for isolation, they
can and enjoy a near-native browsing experience, where content loads nearly as fast as
websites that are not in isolation.
RBI supports most web technologies that a standard web browser
supports, including JavaScript, modern frameworks, HTML5, HTTP protocol, and rich media
support such as video, audio, and animated GIFs. URL addresses shown on the remote
browser will look the same as the original native URLs, with no prefixes added to the
addresses.
Isolation Banner
When your users enter isolated browsing, RBI alerts the users
that they are in isolated browsing by displaying the isolation banner that you set
up when you configured RBI. The banner appears for about five seconds
and then closes.
Report an Issue
A floating action button appears in the isolation browser to help your
users perform browser actions such as reporting an issue or viewing downloads. Your
users can click the button to display a list of actions. They can also drag the
button to different locations on the browser.
The following is an example of the floating action button:
If you configured RBI to allow your users to report any issues
they encountered during isolated browsing, they can click the floating action button
and Report an Issue. RBI will prompt
them to report an issue by filling in and submitting a form:
Browser Security Control
Depending on the browser actions that you defined in an isolation profile, your users
can or cannot perform the following actions in the browser:
View files in isolation—View a file from the isolated website (disabled by
default).
When this action is enabled, the files will be converted into
PDF format and the files will be read-only. If the download files action is
enabled, an option will be provided to download the original file. You can
view these Supported File Types for Viewing Files in Isolation in an isolated browsing
session.
Upload files—Upload any files (including drag and drop) to an isolated website
(allowed by default).
Download files—Download any files (including drag and drop) from an isolated
website (allowed by default).
Copy—Copy any content from the isolated website (allowed by default).
Paste—Paste any content to the isolated website (allowed by default).
Keyboard inputs—Input anything using the physical or virtual keyboard (allowed
by default).
Print—Print any content from an isolated website (allowed by default).
Analysis of Downloaded Files
When you integrate RBI with a third-party CDR provider such as Votiro, your users are protected from any potentially malicious content
that might be embedded in the files that they download.
When a user browses various websites in isolation and selects a file for download,
RBI will send the file to the CDR provider for scanning,
analysis, and removal of malicious content. The file is then reconstructed in its
original format and delivered to the end user's device.
During the download, RBI shows a pop-up notification to let the
user know that the file is being analyzed. When the file has been sanitized and the
download has completed, they can save the file to a location on their local
device.
The user is also notified if the CDR policy blocked the file from being
downloaded.
Mobile Browsing Experience
Users can use their mobile devices to browse websites in isolation. The RBI functionality on mobile devices is similar to the
functionality on desktop devices, except for the following:
The isolation banner is shown at the bottom of the mobile device
display.
Native mobile actions such as the long press, tap, and pinch zoom are
supported.
The context menu for images, hyperlinks, or text elements is accessible with
a long press on the mobile device display.
The floating action button is movable by tapping and dragging it to another
location on the mobile device display.
Remote browsing on a mobile device has the following limitations:
On iOS and iPadOS, when using any web apps through the Chrome browser, users
will see a clipboard access message each time they interact with features
that require access to the clipboard.
Deep linking to directly access specific pages or resources within a mobile
app using a URL is not supported. The link will only open in a mobile
browser.
RBI will not read the permissions set by users for the
browser app, including permissions for location, camera, microphone, and
contacts.
