A clientless remote desktop gateway built on zero trust principles. PRA enables secure RDP, SSH, and VNC access to critical IT and OT systems without exposing jump hosts to the internet—with full session recording, JIT access, and granular audit trails.
100%
Browser-based, no client required
RDP/SSH/VNC
All major protocols supported
Zero
Inbound internet connections to OT/IT
JIT
Just-in-time access enforcement
Zscaler Privileged Remote Access (PRA) is a clientless remote desktop gateway that enables end users, third-party contractors, and IT administrators to securely connect to servers, jump hosts, bastion hosts, and OT/IIoT systems directly from a browser—using RDP, SSH, or VNC. Unlike legacy PAM tools that require deploying complex agents and exposing jump servers, PRA builds on the Zscaler Zero Trust Exchange to broker secure, policy-enforced sessions with full session recording and audit trails.
What's included in this SKU
Users access RDP, SSH, and VNC sessions entirely within a browser—no client software, no agents, no VPN required on the endpoint.
Every privileged session is recorded end-to-end. Recordings are stored securely for compliance audits, incident investigations, and forensic analysis.
Grant temporary, time-limited privileged access. Access is automatically revoked after the session window expires, minimizing standing privilege.
Log every command, keystroke, and action taken during a privileged session with tamper-resistant audit logs for compliance and forensics.
Manage and rotate privileged credentials with integrations to leading PAM vaults—avoiding hard-coded passwords and credential sprawl.
IT admins can observe live sessions, send alerts to users, or terminate sessions in real time if suspicious activity is detected.
Full protocol isolation for SSH, RDP, RealVNC, and VNC. Clipboard controls (text copy/paste) are configurable per session policy.
Enable zero trust privileged access for external vendors and contractors without providing VPN access or exposing jump servers.
Extend zero trust privileged access to operational technology and industrial IoT environments in manufacturing, energy, and healthcare.
Enforce MFA at every privileged session initiation, integrating with your existing IdP and authentication infrastructure.
Isolate and scan files transferred during privileged sessions in a sandboxed environment to prevent malware from reaching critical systems.
Define per-system, per-user, and time-based access policies with role-based controls for IT admins, help desk staff, and third parties.
Traditional PAM tools require deploying jump servers, agents, and complex infrastructure—all while exposing attack surfaces. PRA eliminates this complexity with a cloud-delivered, zero trust approach.
IT admin remote access
Replace RDP over VPN with browser-based zero trust sessions for internal IT staff managing critical servers.
Third-party vendor access
Grant time-limited, session-recorded access to contractors managing client infrastructure.
OT/IIoT environments
Secure access to industrial control systems, PLCs, and SCADA infrastructure in manufacturing and energy.
Compliance & audit requirements
Meet SOC2, HIPAA, PCI-DSS, and NERC-CIP privileged access requirements with full session recording.
No contracts. Low minimums. Monthly invoicing. Start protecting clients today.