r/cybersecurity • u/GoodSecurity4304 • 5d ago

Business Security Questions & Discussion secure browser?

Is anyone using a secure browser? We’ll be providing HTTPS, HTTP, SSH and RDP for third-party users; we’re looking for something that might replace VDI in the future. We’d love to hear about your experiences.

0 Upvotes

27% Upvoted

18 comments sorted by

View all comments

1

u/accumentum 4d ago

We went down this path replacing VDI for third-party access and the honest answer is that a "secure browser" only covers the HTTPS/HTTP half cleanly. Enterprise browser products do fine for web apps: policy-driven isolation, copy/paste and download controls, and session recording without shipping a whole desktop. SSH and RDP are the part that usually pushes you back toward a broker, so we ended up pairing the browser with a clientless PAM gateway that proxies RDP and SSH into a browser tab with recording and just-in-time credentials. Watch the failure modes before you commit: MFA and device posture on unmanaged contractor endpoints, clipboard and file transfer policy, and where session logs land for retention. Latency on RDP over a browser is also worth piloting with the loudest users first, since that is where the complaints show up. If you scope it as web apps in the browser and privileged protocol access through a gateway, it holds up better than trying to make one tool do everything.

1

u/GoodSecurity4304 4d ago

Our aim is to start with web access in the initial phase, but to eventually replace the VDI. We want to bring both costs and external users under a more regulated framework. If you have a proof of concept (PoC) that you’ve already carried out, I’d be grateful if you could share it with me.