Citrix Remote Browser Isolation
docs.citrix.com
What it is
Citrix Remote Browser Isolation separates web browsing from a user’s device to protect corporate networks from browser-based attacks and provide access to internet-hosted web applications. Users open web apps in a configured browser, while browsing data does not transfer directly between the website and the device. Published browsers support shared-passcode, authenticated, and unauthenticated external web apps. Administrators can set URL allow lists, control clipboard use, printing, kiosk mode, region failover, and client drive mapping, then monitor or disconnect active sessions. Optional activity logging records visited host names, access times, user identifiers, and allowlist status in the customer’s Azure Storage Account; uploads occur hourly rather than in real time. Cloud browsers run on VDAs, with Citrix Cloud managing security and patching. Session history and HTTP-request cache are deleted when sessions end, according to Citrix. Access requires an HTML5-compatible browser, with no downloadable client. Traffic uses TLS 1.2 only. Self-hosted workloads require a customer Azure subscription and specified Citrix and DaaS entitlements.
Spec sheet
- Purpose
- The service isolates web browsing to protect corporate networks from browser-based attacks and provide access to internet-hosted web applications.Read 8 Oct 2026 · docs.citrix.com
- Integrations
- Published apps can integrate with Citrix StoreFront Cloud and on-premises StoreFront, and the service can work with Citrix Secure Private Access.Read 8 Oct 2026 · docs.citrix.com
- Headquarters
- Fort Lauderdale, Florida, United StatesRead 28 Sep 2026 · docs.citrix.com
- Founded
- 1989Read 28 Sep 2026 · docs.citrix.com
- Activity logs
- Optional User Activity Logging records visited host names, access timestamps, user identifiers, and allowlist enforcement status in the customer’s Azure Storage Account; uploads occur hourly, not in real time.Read 8 Oct 2026 · docs.citrix.com
- App types
- Published browsers can be used with shared-passcode, authenticated, and unauthenticated external web apps.Read 8 Oct 2026 · docs.citrix.com
- Client requirement
- The service is accessed using an HTML5-compatible browser and provides no downloadable clients.Read 8 Oct 2026 · docs.citrix.com
- Company headquarters and founding
- The opened product and licensing pages did not state Citrix’s headquarters or founding year.Read 8 Oct 2026 · citrix.com
- Controls
- The service offers URL allow lists and controls for clipboard use, printing, kiosk mode, region failover, and client drive mapping.Read 8 Oct 2026 · docs.citrix.com
- Encryption
- Traffic between the user’s browser and the cloud service is encrypted with TLS, and the service supports TLS 1.2 only.Read 8 Oct 2026 · docs.citrix.com
- Hosting and patching
- For the cloud service, browsers run on VDAs and Citrix Cloud manages the components, including operating-system, browser, and Citrix component security and patching.Read 8 Oct 2026 · docs.citrix.com
- How access works
- Users open web apps in a configured browser, and the website does not directly transfer browsing data to or from the user device.Read 8 Oct 2026 · docs.citrix.com
- Monitoring
- Administrators can monitor real-time sessions and disconnect one or more active sessions.Read 8 Oct 2026 · docs.citrix.com
- Self-hosted option
- Self-hosted workloads run the data-plane VDA in a customer-provided Azure subscription and require specified Citrix and DaaS entitlements.Read 8 Oct 2026 · docs.citrix.com
- Session data
- Hosted browsers track browsing history and cache HTTP requests, and Citrix says this data is deleted when the browsing session ends.Read 8 Oct 2026 · docs.citrix.com
Plans and prices
Strong points and limits
Strong points
- Isolates browsing from user devices
- Supports Windows, macOS, and Linux
- Provides URL and file-transfer controls
- Allows active-session monitoring and disconnection
- Integrates with Citrix StoreFront
Limits
- Pricing is available only on request
- No free plan is listed
- TLS 1.2 is the only supported TLS version
- No downloadable clients are provided
Who it suits
It suits organizations seeking remote browser isolation across Windows, macOS, and Linux in a hybrid deployment. Administrators needing URL, file-transfer, session, and monitoring controls can use the service through an HTML5-compatible browser.
Verdict
Citrix Remote Browser Isolation offers browser separation with policy controls, session oversight, and hybrid deployment options. Buyers should verify browser requirements, logging timing, licensing entitlements, and the TLS 1.2 limitation.
Where Specifiction places it
- Browser Isolation Software#11 of 247.6