Hello!Welcome to the Prisma Access Browser personal walkthrough for lower education.

• DLPtest.com

Watermarking

On sensitive sites (like test sites) you may want to enable watermarking to discourage photos being taken from the students phone.Go to DLPtest.com and see the watermarking is enabled with the logo, user name and a timestamp.You are able to adjust the rotation, density and the transparency of the watermark.

Print & Screenshots

You may want to prevent scenarios where a student will have access to confidential information, such as their records and grades and you want to prevent the ability to either print or take screenshots.To test this, right click on this page and select print.Now go to Atlasian.com and take a screenshot, you will see the screenshot is blanked out.

• Atlassian

• Facebook
• Gambling
• Phishing

Block Websites

While the student is on school grounds or using an issued device, you may want to prevent access to certain website categories.We can block access to these easily as well as create custom messaging when the student makes an attempt to visit the site.

Up/Download Protection

We want to protect the students and our environments from malware. Using our Advance WildFire, we can scan and protect against files that are compromised.

• Malicious File

• ChatGPT.com
• Bing.com

Clipboard Control

You can control what data is copied into and out of both the browser and individual web applications.With this, you can allow use of GenAI but restrict copy/paste controls. Try going to ChatGPT and attempt to take data out of or into the application.Now, Try copying an ID number from the left, paste it into your notepad application.Afterwards, paste it into bing.com (a "sanctioned" application for this example) and it will be allowed.

Safe Search

We can force search engine's to use "safe search" functionality.Go to Google and try searching for something, you will see it returns the results in safe search mode.

• Google

Typing Guard

In the text field to the right, try typing a profanity word.You can customize this control to prevent typing of credit cards, PII, self harm, and much more.

Data Masking

On the left, you will see some data is being masked out. In this case we selected the self harm category to be masked however you can expand this also to profanity, personal information or many other data patterns.

Login Controls

You are able to restrict log in access to web applications based off of the user domain.Go to Box.com and enter your username of "user@gmail.com".You will see that you are blocked from moving forward with the login sequence.Now try it from "user@pabdemo.com" and you will be allowed to proceed with logging in.

• Box.com

Extensions

In order to protect you from extensions, we implement several safety mechanisms.First, unlike legacy browsers, we do live scanning of the extension code to ensure it is safe at all times.We are also able to block its ability to access certain permissions.In this case we also force installed Google Translate on this instance. As you can see in the top right.

Incognito & Dev Tools

In order to harden the browser, you are able to disable certain functions.In this instance, both "Incognito" mode and Dev Tools have been blocked.Try and open either.

Conditional Access

When a web application is behind your IDP, you can force the users to log into that application from the Prisma Access Browser only using the IDP's conditional access.Here is a video showcasing the inability to log into O365 from chrome and the message the end user receives.

Up/Downloads

Faculty may have access to sensitive data like PII, credit card information, etc.To protect that data, you can prevent the up/download of files when they contain sensitive information.Click on the button to the right named "Credit Card File" which is a simple text file that has credit card information in it.Additionally, you can make files "protected" which means they can only be opened from within the browser, eliminating the ability to exfiltrate the data.To see this, click on the "Safe PDF" button.

• Credit Card File
• Safe PDF