Remote Browser Isolation
Complete Protection with
Next-Gen Remote Browser
Isolation Technology
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
Complete Protection From Zero-Day Threats
Prevent zero-day attacks, deliver a near-native browsing experience on websites and apps with no compromise in performance or image quality, and apply your existing security policies within the RBI to better secure users. Unlike traditional RBI products with pixel-pushing reconstruction that causes high latency or DOM-based approaches that expose security gaps, Palo Alto Networks RBI uses the latest technologies to deliver complete protection against zero-day threats.
Easy to Deploy and Manage with Native SASE Integration
Easily configure and deploy Palo Alto Networks’ RBI as part of one unified SASE platform. Native integration with SASE means admins can simply define the traffic that needs to be isolated and do not need to worry about routing the traffic across multiple disjointed products or managing policies in different products. All logging and configuration happens in the same place, with no need to rebuild security policies for isolations. Simply apply existing security profiles and rules to isolation. Monitor and enforce remote actions for users and gain insight into the user’s journey before, during and after isolation from one single pane.
Deliver a Near-Native User Experience With No Friction
Deliver a near-native user experience when using Palo Alto Networks’ RBI. Websites and applications are rendered with no compromise in quality and perform as if the user was browsing natively. You can use the browser and device of your choice with zero onboarding or training needed because the RBI is browser and platform agnostic.
Secure Data and User Activity in the Browser with Uniform Security Policies
Take no chances on your security policy. Get complete security coverage while using the RBI through Prisma Access. Ensure uniform security policies are active and engaged within RBI with no security policy change by leveraging RBI’s native integration into Prisma Access. Reduce overall attack surface by leveraging Prisma Access’s AI-powered security capabilities, like Advanced URL Filtering and Advanced Threat Protection capabilities. Reduce the risk of data breach by controlling unsafe movement of data and preventing data exfiltration for users in the organization with AI-powered data protection. Implement a holistic approach to security.
Remote Browser Isolation
Work has become a dynamic activity - at home, in the office, and on the go. This shift to work-from-anywhere means more employees connect, create, and collaborate online than ever before. However, increasing reliance on the Internet and browser-based productivity apps like email, instant messaging, and cloud collaboration tools also means there’s an expanding external attack surface with new potential entry points for threat actors.
At the same time, adversaries have matured their approach to web attacks with as-a-service offerings, hacking kits, advanced social engineering, and even malicious generative AI tools to deliver more effective and targeted web attacks. In the first half of 2022, over 67 million malicious domains were created1 ; and in 2023, over 74% of successful breaches included the human element2 . This unprecedented level of volume and social engineering sophistication, coupled with a skyrocketing internet-facing attack surface, means that organizations and high-value employees are at heightened risk.
Shortcomings of Existing RBI Solutions
- First-Generation (Pixel Pushing): Web content is rendered and processed on a remote server which captures the visual representation of the page and sends it to the users’ device pixel-by-pixel. This method provides fully air-gapped security but is bandwidth-heavy, driving up costs and degrading the user experience.
- Second-Generation (DOM-based): A Document Object Model (DOM) approach reconstructs the page with HTML elements. It filters and processes web content before rebuilding the page on the user’s device. This approach responds better than pixel-pushing but exposes the user to potentially malicious files and zero-day threats.
- Third-Generation (SKIA): An open-source 2D graphics library renders the webpage through a SKIA rendering layer to address many of the gaps with pixel and DOM-based approaches. However, SKIA has limited versatility for low-latency, highly dynamic, and interactive real-time applications like O365.
- Fourth-Generation (Isolation Platform): Unlike traditional pixel-pushing reconstruction that causes high latency or DOM-based approaches that expose security gaps, a next-generation RBI isolation platform combines the latest vector and pixel-based technologies for superior isolation while simultaneously delivering near-native UX.
Browsers and Platforms
RBI supports major browsers like Chrome and Edge on Windows, and Chrome and Safari on MacOS.
Flexible DeploymentRBI supports all onramps including GlobalProtect, Explicit Proxy, and Remote Networks. RBI leverages Prisma Access compute locations that are closest to the end user’s geographic location to minimize latency.
Cloud-Delivered Security ServicesAll security profiles–Advanced Threat Prevention, Advanced URL Filtering, Advanced WildFire®, SaaS Security, and Data Loss Prevention–are supported on the web traffic from RBI to the destination.
Data Loss PreventionRBI supports granular data leak controls including cut, copy, paste, print, keyboard input, and remote rendering of files.
User ExperienceNext-generation isolation combines multiple technologies and custom transformers to enable near-native user experience on highly dynamic and real-time applications that require low-latency interactivity.
Single Pane of GlassNative integration with Prisma Access provides single-paneof-glass monitoring, centralized policy enforcement, and dynamic security posture management. Traffic redirection to RBI is policy-driven and natively integrated into Prisma Access policies.
Key Benefits
- Strongest protection against zero-day web attacks with the most advanced isolation technology to prevent data leaks and patient zero.
- Enables workforce and digital transformation with an RBI solution that seamlessly embeds into existing workflows with near-native web browsing and user experience.
- Low cost, effort, and complexity to maintain RBI with uniform policies, centralized enforcement, and single-pane management, all natively integrated with Prisma Access.
Documentation:
Download the Remote Browser Isolation Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing and product availability subject to change without notice.