Last updated
The only SASE-native secure browser that empowers secure work for any user, any device, any app, anywhere.
$ winget install --id PaloAltoNetworks.PrismaAccessBrowser --exact --version 149.18.4.115Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
Prisma Access Browser uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i crx_signed_o4_stable_prisma_access_browser_installer_149_18_4_115-149.18.4.115-0423e4ba.msi /quiet /norestart
See the full silent install reference for Prisma Access Browser →
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
Prisma Browser is designed to enhance security for both managed and unmanaged devices. It provides a natively integrated enterprise browser that extends protection to unmanaged devices, helping safeguard business applications and data by implementing security directly within the browser.
Prisma Browser supports various use-cases, including:
- Third-Party Access: Enables secure access to SaaS or private web applications for contractors, partners, consumers, or students using unmanaged devices.
- Bring Your Own Device (BYOD) Access: Enables secure access to SaaS or private web applications for contractors, partners, consumers, or students using unmanaged devices.
- Temporary Secure Access: Facilitates access to critical applications such as Human Resources and Payroll during system transitions like agent rollouts or network mergers.
- Secure Access for Managed Devices: Ensures protection for employees using work devices to handle highly sensitive data.
Designed specifically for enterprise environments, Prisma Browser incorporates security features aimed at mitigating risks such as phishing, Malware, eavesdropping, and data exfiltration. It retains the familiar interface and functionality of Google Chrome while integrating additional security measures to address potential vulnerabilities, offering a balance between usability and protection.
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
7 known CVEs via NVD
A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will ca...
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end...
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from...
PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or by using an externa...
An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator with access to the CLI to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS...
An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root user privileges. The a...
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.
More from Palo Alto Networks Inc or browse browser, chromium, internet.