PBI Private Access

PBI Private Access separates the browsing activity from the endpoint by running the browser session in a cloud container or remote VM. This separation prevents malicious scripts or data from reaching the user’s device, especially when accessing sensitive internal apps.

Isolation policies can block copy-paste, downloads, printing, and keyboard access, ensuring sensitive information stays secure, even when accessed from unmanaged or BYOD endpoints.

Yes. Since the browsing session runs remotely, any exploits or malware are contained and never reach the endpoint.

Absolutely. It's a common use case. PBI Private Access provides browser-based access to internal apps through an isolated session, delivering secure access without a full VPN or tunneling services.

Users log in via a secure web portal. The browser renders the session but runs in a secure container hosted on-premises.

Yes. Policies can dynamically enforce isolation if the user is on an unmanaged device, in a risky location, or lacks the required security posture.

Yes. It works with standard IDP providers (Okta, Entra, etc.) to authenticate users before granting access to apps.

Yes. Browser-isolated access portals support MFA integrations, often through the same IDP you already use.

There is some overhead, but PBI Private Access is optimized for performance. Most users won’t notice any significant lag for typical web apps, though media-heavy apps might feel slower.

Refer to the Owner and Admin Guide for detailed onboarding steps to install PBI Private Access on your premises.

No installation or pre-requisite is required — users can access the product without installing or running any application in advance. before using the product.

PBI Private Access provides session logging and detailed audit events to support compliance and investigation efforts.