* [Blog](https://www.paloaltonetworks.com/blog) * [SASE](https://www.paloaltonetworks.com/blog/sase/) * [5G](https://www.paloaltonetworks.com/blog/sase/category/5g/) * Managed Enterprise Browse... # Managed Enterprise Browser Security with Prisma Browser for MSPs [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsase%2Fmanaged-enterprise-browser-security-with-prisma-browser-for-msps%2F) [](https://twitter.com/share?text=Managed+Enterprise+Browser+Security+with+Prisma+Browser+for+MSPs&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsase%2Fmanaged-enterprise-browser-security-with-prisma-browser-for-msps%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com%2Fblog%2Fsase%2Fmanaged-enterprise-browser-security-with-prisma-browser-for-msps%2F&title=Managed+Enterprise+Browser+Security+with+Prisma+Browser+for+MSPs&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com/blog/sase/managed-enterprise-browser-security-with-prisma-browser-for-msps/&ts=markdown) \[\](mailto:?subject=Managed Enterprise Browser Security with Prisma Browser for MSPs) Link copied By [Yashwanth Bommakanti](https://www.paloaltonetworks.com/blog/author/yashwanth-bommakanti/?ts=markdown "Posts by Yashwanth Bommakanti"), [Shobhan Lakkapragada](https://www.paloaltonetworks.com/blog/author/shobhan-lakkapragada/?ts=markdown "Posts by Shobhan Lakkapragada") and [Elad Gavra](https://www.paloaltonetworks.com/blog/author/elad-gavra/?ts=markdown "Posts by Elad Gavra") Sep 08, 2026 5 minutes [5G](https://www.paloaltonetworks.com/blog/sase/category/5g/?ts=markdown) [MSP](https://www.paloaltonetworks.com/blog/sase/category/msp/?ts=markdown) [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [Secure Browser](https://www.paloaltonetworks.com/blog/sase/category/secure-browser/?ts=markdown) Many organizations today face a common challenge: they require enterprise-grade security but lack the time, specialized resources, or infrastructure to manage it effectively. As a result, they turn to Managed Service Providers (MSPs) to help them deploy, manage, and operate security services. MSPs offering such services to a large number of customers in turn face significant administrative overhead. To address this challenge, Palo Alto Networks is introducing **Prisma Browser for MSPs** . Purpose-built for [NextWave MSSP Partners](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program?ts=markdown), this new capability enables Managed Service Providers (MSPs) to deliver powerful, browser-based security to customers. By streamlining deployment, centralizing management, and offering flexible licensing, Prisma Browser for MSPs removes the operational friction of individually managing Prisma Browser deployments for hundreds of end customers. ### **Secure the Future of Work with Prisma Browser** The browser has become the primary workspace for today's employees, making it one of the most effective places to enforce security. As users access SaaS applications, private applications, corporate data, and GenAI tools through the browser, organizations need security that protects every web session. Leveraging Palo Alto Network's AI-driven security, which blocks up to 9 million new and unique attacks every day, and enterprise DLP, [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) stops web-based threats, secures interactions with sensitive data, and prevents unauthorized data sharing across web applications and AI applications. Prisma Browser enables MSPs to deliver enterprise-grade web security, browser-native data protection, and secure access directly in the browser. Customers can confidently adopt GenAI while preventing sensitive data from being exposed to unsanctioned AI applications. It also stops phishing, malware, malicious websites, and browser-based attacks before they impact users, and protect sensitive information with policies that prevent unauthorized downloads, uploads, copy-and-paste, and other data exfiltration techniques. The same browser also enables organizations to securely support BYOD and third-party contractors by extending consistent security controls to unmanaged devices without compromising user experience or requiring corporate-issued endpoints. ### **Managed Browser Solution: Hierarchical Tenancy Model Built for Efficiency** At the core of Prisma Browser for MSPs is a streamlined management model, with Multi-Tenant Strata Cloud Manager, designed to optimize visibility, provisioning and license management across your entire customer ecosystem. The multi-tenant architecture has two distinct levels: * **The Root Tenant:** Serving as your primary administrative container, the root tenant is where the Prisma Browser license pool is activated. From this single vantage point, administrators can dynamically allocate license capacity, enforce baseline security policies, and monitor deployment health across all associated customers. * **Child Tenants:** Each child tenant represents an individual customer deployment. To uphold strict data separation and privacy controls, child tenants operate as dedicated environments with their own users and devices, and if needed the ability to customize security policies. MSPs can grant access to end customers to view or manage their own tenant. No customer can view or access another's data, providing complete organizational boundaries. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/09/sept4.png) *Operational dashboard showing health of deployment across the multi-tenant hierarchy* ### **Optimizing License Management and Identity Architecture** Managing separate software procurement contracts and Identity Platform integrations for each end customer is an operational overhead that can quickly stall an MSP's growth. This new platform addresses those exact operational bottlenecks through infrastructure flexibility. #### **Dynamic License Pooling** MSPs purchase a pool of Prisma Browser licenses (minimum of 200 users across all customers) and can dynamically allocate them to child tenants (as low as one user). If an end customer wants to reduce the number of users or not renew, those licenses can be reclaimed and returned to the central license pool. This allows MSPs to service customers of any size without the overhead of unused licenses. #### **Unified Identity Architecture** Integrating distinct Identity Providers (IdPs) for every end customer can quickly become a deployment bottleneck. The platform addresses this with **MSP IdP architecture** , allowing providers to host a single, centralized IdP at the root level, and create user groups to authenticate users across each child tenant. For end customers who have their own IdP platform, this solution also seamlessly supports **Tenant-Specific IdPs** linked to a tenant-level Cloud Identity Engine (CIE). ### **Streamlining Customer Onboarding and Security Reporting** To accelerate time-to-value, the platform features a self-service **Add Tenant Wizard** within the Strata Multi-tenant Cloud Manager UI. This guided, step-by-step workflow automates the provisioning process---including region selection, license allocation, and IdP configuration---allowing administrators to deploy new customer environments in minutes. For MSPs that want to automate the process, the same workflow can be invoked via APIs. Once deployed, Prisma Browser for MSPs provides robust visibility needed to maintain a strong security posture and clearly demonstrate service value to your clients: * **Aggregated Security Metrics:** The root dashboard surfaces macro-level insights across all tenants, including the total number of websites analyzed and a detailed breakdown of blocked threats by category and method. * **Demonstrable Customer Value:** Administrators can generate and download tenant-specific reports for individual customers. These reports detail top malicious websites, malware families, and malicious extensions blocked, giving MSPs the data they need to prove the tangible impact of their security services. ### **Scaling Managed Security Services with Enterprise Browser** The introduction of Prisma Browser for MSPs fundamentally redefines how Managed Service Providers secure the modern enterprises, with The Most Secure Browser Built for the Agentic AI Era. By combining enterprise-grade threat protection with an operationally efficient, multi-tenant framework, Palo Alto Networks empowers MSPs to scale their business, protect their customers, and eliminate management complexity. ### **Deploy a Secure Browser for Your Customers** Ready to simplify your browser security deployments and eliminate administrative overhead? Review the Prisma Browser prerequisites in the NextWave Partner Community or[contact your account representative](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) to activate your multi-tenant licenses today. *** ** * ** *** ## Related Blogs ### [5G](https://www.paloaltonetworks.com/blog/sase/category/5g/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [MSP](https://www.paloaltonetworks.com/blog/sase/category/msp/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Strata Cloud Manager](https://www.paloaltonetworks.com/blog/sase/category/strata-cloud-manager/?ts=markdown) [#### Palo Alto Networks Elevates Multi-Tenant Prisma SASE Management with a Reimagined Portal for MSPs](https://www.paloaltonetworks.com/blog/sase/palo-alto-networks-elevates-multi-tenant-prisma-sase-management-with-a-reimagined-portal-for-msps/) ### [5G](https://www.paloaltonetworks.com/blog/sase/category/5g/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/sase/category/partner-integrations/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown) [#### 5G SASE for OT Security: Stopping the Cellular APN Blind Spot](https://www.paloaltonetworks.com/blog/sase/5g-sase-for-ot-security-stopping-the-cellular-apn-blind-spot/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Secure Browser](https://www.paloaltonetworks.com/blog/sase/category/secure-browser/?ts=markdown) [#### Expand Security From Network to User: What's New With Prisma Browser and Next-Gen Firewall In PAN-OS 12.2](https://www.paloaltonetworks.com/blog/sase/expand-security-from-network-to-user-whats-new-with-prisma-browser-and-next-gen-firewall-in-pan-os-12-2/) ### [Agentic Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/agentic-identity-security/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/category/partners/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Scale Enterprise Agentic AI Securely With Idira and Claude](https://www.paloaltonetworks.com/blog/identity-security/securing-claude-ai-agents-idira/) ### [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [SD-WAN](https://www.paloaltonetworks.com/blog/sase/category/sd-wan/?ts=markdown) [#### Probes Are Never Enough, Never Have Been, Never Will Be](https://www.paloaltonetworks.com/blog/sase/probes-are-never-enough-never-have-been-never-will-be/) ### [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Identity Governance and Administration](https://www.paloaltonetworks.com/blog/identity-security/category/identity-governance-and-administration/?ts=markdown), [Identity Security](https://www.paloaltonetworks.com/blog/cloud-security/category/identity-security/?ts=markdown), [Secure Browser](https://www.paloaltonetworks.com/blog/sase/category/secure-browser/?ts=markdown) [#### From Identity Blind Spots to Automated Governance with Prisma Browser](https://www.paloaltonetworks.com/blog/sase/from-identity-blind-spots-to-automated-governance-with-prisma-browser/) ### Subscribe to Sase Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language