Disposable Browser
The Disposable Browser gives users throw-away browser sessions on their Windows device. It runs Chrome or Edge in an isolated environment, and everything the session collects is destroyed when it closes: history, cookies, cache, saved passwords and site storage. Use it for untrusted or high-risk sites, so nothing they leave behind reaches the device.
You configure the Disposable Browser as a component of a profile, under Endpoint > Profiles. For the profile itself, see Profiles.
The Disposable Browser exists only on Windows x64 devices with the full (administrator) install of the Netzilo client. Saving a profile needs the Enterprise plan.
How it works
- A profile with a Disposable Browser reaches a Windows x64 device in one of its groups.
- The Netzilo client creates shortcuts named Disposable Google Chrome and Disposable Microsoft Edge in the folder you name, for whichever of the two browsers is installed. When neither is installed, nothing is created.
- A session started from those shortcuts is isolated from the device. When the user closes it, all its data is destroyed.
Add the Disposable Browser to a profile
Open a profile under Endpoint > Profiles, or click Add Profile, and click the Disposable Browser card.
| Field | What to enter |
|---|---|
| Desktop Folder Name | The folder where users find the disposable browser shortcuts, for example Disposable Browsers. |
Click Save Changes, then save the profile. To remove the Disposable Browser, click ON on its card and confirm.
Send sites to the Disposable Browser
To make users open certain sites only in the Disposable Browser, add those sites as domains of the same profile's Browser Extension or Enterprise Browser, and turn on Use Disposable Browser in their Domain Settings. The setting is available only when the profile has a Disposable Browser, and it turns Use Enterprise Workspace off.
On a Windows device with the Disposable Browser, a matching site is replaced by a page
offering Browse with Disposable Browser, which opens it there. On macOS, Linux,
Windows ARM64 or a non-administrator install, the site is blocked, because there is no
Disposable Browser to open. Each such visit records browser.isolation.redzone.required
under Activity > Events.
What users see
- A folder with Disposable Google Chrome and Disposable Microsoft Edge shortcuts.
- Sessions that start clean every time and forget everything when closed. Tell users to save files they need outside the Disposable Browser before closing it.
- Browse with Disposable Browser instead of a site you send there.
Troubleshooting
No shortcuts appear. The device is not Windows x64 with the full install, the Desktop Folder Name is empty, or neither Chrome nor Edge is installed. Also check that the device is in the profile's groups and that the profile is Active.
A site you send to the Disposable Browser is just blocked. The device cannot run the Disposable Browser: it is macOS, Linux, Windows ARM64, or has the non-administrator install.
Related Documentation
- Profiles - Groups, operating systems and components
- Browser Extension - Send domains to the Disposable Browser
- Enterprise Workspace - Isolate native Windows applications
- Enterprise Browser - The managed Netzilo browser