Install the Protected Browser extension

As an IT administrator, you may want to secure access to critical web applications without requiring users to move to a new browser for all their work. Many organizations rely on existing browser setups, and users often depend on specific browsers for business-critical applications.

To support this, Sophos provides a Protected Browser extension that works with supported browsers, including Chrome, Microsoft Edge, and Atlas. The extension lets you apply security policies and gain visibility into user activity within their existing browser. You can also enforce the use of the full Protected Browser when you need enhanced security and control. This adds stronger protection for those applications and helps users transition to Sophos Protected Browser gradually.

Restrictions

• We support the Protected Browser extension only on Chromium-based browsers.
• Your browser requires your devices to be managed by a Mobile Device Management (MDM) solution, such as Microsoft Intune, Jamf, Active Directory GPO, or Google Enterprise Core. For example, for Google Chrome, see ExtensionSettings.
• You can't access the agentless RDP and SSH resources through the extension.
• The extension doesn't evaluate the health status of the endpoint devices.
• If you install the extension after setting up browser enforcement with Entra ID or Okta, you must turn off Entra ID or Okta and then turn it on again. To do this, go to Global Settings > Products and Services > Protected Browser. Under Browser enforcement, turn off Entra ID or Okta and turn it on again.
• You can't enforce screen recording and sharing controls using the extension.
• We don't support the extension in private browsing modes, such as Incognito and InPrivate, in any supported browser.

Installation

You can install the extension manually or through Mobile Device Management (MDM) solutions such as Microsoft Intune, Jamf, Active Directory GPO, and Google Enterprise Core.