Remote Browser Isolation

The Citrix Remote Browser Isolation service (formerly Secure Browser service) isolates web browsing to protect the corporate network from browser-based attacks. Remote Browser Isolation service delivers consistent, secure remote access to internet hosted web applications, with no need for user device configuration. Administrators can rapidly roll out remote isolated browsers, providing instant time-to-value. By isolating internet browsing, IT administrators can offer end users safe internet access without compromising enterprise security.

Users log on through Citrix Workspace (or Citrix Receiver) and can open web apps in the configured web browser. The website does not directly transfer any browsing data to or from the user device, so the experience is secure.

The Remote Browser Isolation service can publish remote isolated browsers for use with:

• Shared Passcode external web apps. If you publish a browser with shared passcode authentication, users must enter the passcode to launch an app.

• Authenticated external web apps. When you publish authenticated external web apps and launch the apps using Citrix Workspace, the Remote Browser Isolation service requires a resource location containing at least one Cloud Connector (two or more are recommended). For details, see Citrix Cloud Connector. For authenticated apps, you must add users with Citrix Cloud Library.

• Unauthenticated external web apps. When you publish unauthenticated external web apps and launch the apps using Citrix Workspace, the Remote Browser Isolation service requires a resource location containing at least one Cloud Connector (two or more are recommended). For details, see Citrix Cloud Connector.

  Although typically not recommended, unauthenticated external web apps might be used for a simple proof of concept.

For more information, see Publish a remote isolated browser.

The service also offers:

• Integration of published apps with Citrix Workspace
• Integration of published apps with on-premises StoreFront
• Simple URL allow list function for security
• Usage monitoring
• Controls for clipboard use, printing, kiosk mode, region failover, and client drive mapping

Additional resources

For developers: Preview API for Remote Browser Isolation