some file

Profiles

A profile protects data in use on your users' devices. It binds one or more protection components to groups and operating systems, and the Netzilo client applies it on every matching device: an isolated workspace for native applications, a managed browser, a throw-away browser, or controls for chosen web domains in the user's own browser.

Manage profiles under Endpoint > Profiles.

Saving a profile needs the Enterprise plan. On other plans the dialog's last button reads Upgrade Plan and opens Settings > Plans & Billing. Self-hosted servers qualify.

How it works

  1. A profile has groups, operating systems and components.
  2. A device receives the profile when it is in one of the groups and runs one of the operating systems. The client picks up a change within about 30 seconds.
  3. Each component is configured inside the profile. Several components can be combined in one profile.
ComponentWhat it does
Enterprise WorkspaceRuns native Windows applications, the work apps, in an isolated and optionally encrypted enclave with restrictions such as clipboard, printing, screen capture, watermark and recording.
Enterprise BrowserConfigures the Netzilo Enterprise Browser: bookmarks, controls per web domain, an extension allow or block list, encryption and wiping of its data.
Disposable BrowserGives users throw-away Chrome and Edge sessions whose data is destroyed when they close.
Enterprise Browser ExtensionApplies controls per web domain in the user's own browser through the Netzilo browser extension, adds bookmarks to the Workplace, and turns on clientless access on its Proxy tab.

Platform scope

ComponentWhere it applies
Enterprise WorkspaceWindows x64 devices with the full (administrator) install of the Netzilo client.
Disposable BrowserWindows x64 devices with the full (administrator) install.
Enterprise BrowserWherever the Enterprise Browser is installed: Windows, macOS, iOS and Android.
Enterprise Browser ExtensionAny operating system with a supported browser. The Proxy tab works in Chromium-based browsers and Firefox, not in Safari.

A Windows ARM64 device or a non-administrator install gets no workspace and no Disposable Browser, whatever the profile says. Choosing macOS or Linux in a profile still delivers its Enterprise Browser and Enterprise Browser Extension parts there.

AI prompts and answers in the browser are not governed by a profile. They are governed by Edge filters whose operating systems include Browser. See Browser Extension.

The profiles list

The Profiles page under Endpoint, listing six profiles with their enabled dot, Active switch, operating system icons, groups such as Employees and Contractors, component icons and a Delete button, with the All, Active and Inactive filter and the Add Profile button

ColumnWhat it shows
NameThe profile's name, with a green dot when it is enabled.
ActiveA switch that enables or disables the profile at once.
OSThe operating systems the profile applies to.
GroupsThe groups the profile applies to.
ComponentsAn icon for each component the profile configures.

Filter the list with All, Active and Inactive, or search by name. Click a row to edit the profile.

Create a profile

  1. Click Add Profile.

    The Add Profile dialog on the Components tab, with the group Contractors, the operating systems Mac and Windows, the four component cards Enterprise Workspace, Enterprise Browser, Disposable Browser and Enterprise Browser Extension with Enterprise Browser ON, and the Enable Profile switch on

  2. On the Components tab, fill in the fields.

    FieldWhat to enter
    GroupsThe groups whose devices receive the profile. Required. Type a new name and press Enter to create a group.
    OSThe operating systems the profile applies to: Windows, Mac, Linux, Android, iOS. Windows is preselected.
    Component cardsClick a card to configure that component. Its pill reads ON once it is configured. Click ON to remove the component; the dashboard asks you to confirm, and its settings are lost.
    Enable ProfileOff keeps the profile without applying it.

  3. Click Continue. On the Name & Description tab, enter Name of the profile and an optional Description (optional).

  4. Click Create Profile. When you edit an existing profile, the button reads Save Changes.

Each component has its own page that describes every setting of its dialog: Enterprise Workspace, Enterprise Browser, Disposable Browser and Browser Extension.

Posture checks in a profile

The Enterprise Workspace and every domain setting of the Enterprise Browser and the Enterprise Browser Extension have a Posture Checks tab. There you Browse Checks or create a New Posture Check, and choose under Posture Check Evaluation whether All checks must pass or Any one. The device's own Netzilo client evaluates them.

Do not use the Netzilo Gateway item in a profile: every device with the client fails it. Use the Enterprise Workspace and Enterprise Browser items only where the workspace's or browser's own peer is evaluated. See Posture Checks.

Change, disable or delete a profile

  • Change. Click the profile's row, change what you need and click Save Changes. Saving a change to an Enterprise Workspace restarts open workspaces; see What users see.
  • Disable. Turn off the Active switch on the row. Devices drop the profile at their next update.
  • Delete. Click Delete on the row and confirm.

Creating, changing and deleting profiles is recorded under Activity > Events as profile.created, profile.updated and profile.removed. The components record their own events, listed on their pages.

What users see

  • Enterprise Workspace. Shortcuts for the work apps appear in a folder on the Desktop and under Start Menu > Programs > Netzilo. When an administrator saves a change to the workspace, open workspaces show Your workspace will be restarted in N seconds.
  • Disposable Browser. Shortcuts named Disposable Google Chrome and Disposable Microsoft Edge appear in the folder the profile names.
  • Enterprise Browser Extension. The Netzilo client installs the extension in Chrome and Edge once the profile has at least one domain. On Linux, that managed browser policy also blocks every other extension in the browser, so warn Linux users first. The profile's bookmarks appear on the Applications tab of the user's Workplace, not inside the extension.
  • Domain controls. On a matching site, users see the effects of the restrictions: blocked downloads or URLs, masked text, a watermark, or a page that sends them to the workspace or the Disposable Browser.

Troubleshooting

The last button reads "Upgrade Plan". The account is not on the Enterprise plan.

A profile is saved but nothing changes on a device. Check that the device is in one of the profile's groups, that its operating system is in the profile's OS list, that the profile is Active, and that the client is connected. Changes reach the client within about 30 seconds.

The extension is not installed in Chrome or Edge. The profile has no domain yet, the device runs the Enterprise Browser, which bundles the extension, or the browser does not read the managed policy on that Linux desktop. Install the extension from the store or by browser policy; see Browser Extension.

A domain's controls do not apply. Write the domain with a leading dot, such as .salesforce.com, to cover its subdomains. A failing posture check on the domain setting also stops it; look for browser.posture.check under Activity > Events.

A Windows user has no workspace. The device is ARM64 or has the non-administrator install. See Enterprise Workspace.