Browser Access allows you to leverage a web browser for user authentication and application access, without requiring users to install Zscaler Client Connector on their devices. For certain use cases, it might not be feasible or desirable to install Zscaler Client Connector on all devices. For example, you might want to:

• Control user access to applications on devices with operating systems that are not currently supported by Zscaler Client Connector.
• Provide third-party access to applications on devices that might not be owned or managed by your company (e.g., contractor or partner-owned devices).

However, when you define an application within an application segment and enable Browser Access, Zscaler Client Connector access is automatically applied. This allows your users to request access to the application via any web browser that supports TLS 1.2 (with cipher suite ECDHE-RSA-AES128-GCM-SHA256) with a proxy that doesn't modify the webpage contents or via Zscaler Client Connector. The service supports HTTP and HTTPS protocols, and inserts a Via header in HTTP requests. The service also accepts CORS requests with the right settings and valid OPTIONS requests that include certain headers. To learn more, see Configuring Application Segments.

Browser Access cookies are session based, so they're cleared when a web browser's session terminates. Therefore, users must authenticate before accessing applications via Browser Access. In addition, users are asked to reauthenticate periodically based on the Authentication Timeout setting of the timeout policy rule. To learn more, see Configuring Timeout Policies.

About the Browser Access Page

On the Browser Access page (Policies > Access Control > Clientless > Browser Access), you can do the following:

1. View and add DNS search domains.
2. Expand all the rows in the table to see more information about each application.
3. Filter the information that appears in the table. By default, no filters are applied.
4. View a list of all applications that were specifically configured for Browser Access within an application segment. For each application, you can see:
   • Name: The name of the application. When expanded, the following information is displayed:
     • Segment Group: The segment group that the application segment is a member of.
     • Server Groups: The server groups that the application is hosted on.
     • Canonical Name (CNAME): The canonical name associated to the application. You can click the Copy icon to copy the CNAME record to your clipboard.
     • Certificate: The Browser Access (web server) certificate associated to the specified application.
   • Domain: The fully qualified domain name (FQDN) associated to the application.
   • Status: Indicates that the application segment is enabled or disabled.
   • Application Protocol: The protocol (HTTPS or HTTP) used for the application.
   • Application Port: The port number used for the application.
5. Edit an existing application segment.
6. Delete an application.