Threat prevention
Remote Browser Isolation (RBI)
Open risky websites in an isolated cloud browser, so malicious code never reaches the device.
Remote Browser Isolation (RBI) runs web pages in a browser in the cloud and sends only a safe rendering to the user. Nexapp applies RBI to risky or uncategorised sites by policy, so users can still reach them without exposing their endpoint.
What it does
Blocking every unknown website frustrates users and floods the help desk. Allowing them means trusting pages that may carry exploit code, malicious scripts or drive-by downloads. Remote Browser Isolation removes that trade-off. The page loads and runs in an isolated browser in the cloud. The user sees and works with a safe rendering, while any code on the page stays inside the isolated session and is discarded when it ends. Users keep their access, and the endpoint stays out of reach.
How it works in Nexapp
Policy decides what is isolated
Rules in the one policy engine send risky or uncategorised sites to isolation, while known-good sites load normally.
Code stays in the cloud
Page code runs in the isolated cloud browser. The endpoint receives the rendering, not the scripts behind it.
Fills the gap between allow and block
URL filtering and DNS security handle clearly bad and clearly good sites. RBI handles the uncertain middle.
Logged like any web session
Isolated sessions appear in web reports and can be exported to your SIEM over syslog.
Where teams use it
Frequent phishing targets
Senior executives and finance staff have links to unknown sites opened in isolation by default.
Research on the open web
Procurement and research teams visit new supplier and industry sites without exposing their laptops.
Contact centres
Agents who must open customer-supplied links do so in isolation, keeping shared workstations clean.
Frequently asked questions
Does RBI replace the SWG?
No. The SWG blocks known-bad sites and allows known-good ones.
RBI handles the uncertain middle, so you can allow access without taking on the risk.
Which sites get isolated?
You decide in policy. Many organisations isolate uncategorised or risky categories, and sometimes all browsing for specific high-risk groups.
Is RBI managed separately?
No. RBI is delivered from the cloud as part of the Nexapp platform and managed from the same console as your web, SaaS and access policy.
Related capabilities
- Secure Web Gateway (SWG)Safe internet access for every user, whether at a branch, at home or on the road.
- DNS securityBlock malicious domains, command-and-control callbacks and DNS tunnelling at the first lookup.
- Nexapp browser extensionCarry zero trust access and data rules into the browser, where much of today's work happens.
- All capabilitiesEvery capability in the Nexapp SASE platform.
See Remote Browser Isolation (RBI) on your own sites.
24×7 NOC in Pune · 75,000+ devices deployed · 400+ enterprise and banking customers since 2014.