Unmanaged devices, judged by what they report.
A personal laptop or phone is not yours to manage, and Pramaan does not ask it to be managed. It scores what a device reports, and your access rules decide what that score allows.
What a device reports
With the Pramaan desktop agent installed and agent posture reports switched on, a laptop reports its posture checks. On Windows and macOS, a device the agent finds not centrally managed carries the unmanaged label, which weighs 12 by default. Linux reads only a realm join and never reports it.
A browser reports nothing on its own. By default, a browser session carries the posture captured when it was signed in: that of the device that approved it. A laptop's own agent report counts in a browser decision when that laptop approved the sign-in in the Pramaan desktop app; when a phone approved it, the phone's posture counts. A sign-in that no device approved carries no posture, and its tier is unknown.
What your rules do with it
Labels reach access through your rules: an access rule can name posture labels, such as unmanaged, and step up or deny a request from a device that carries such a label, or require a minimum score. You decide whether a device carrying unmanaged is refused, asked to sign in again, or let through.
The weights are defaults, and administrators can retune them. See device posture for every check and its weight.
Keep the session on the server
Browser-delivered RDP, SSH and VNC keep the session on the server side: the browser talks to the broker, which relays to a remote-desktop gateway; the gateway holds the connection to the machine, and the connection's secrets never reach the browser.
Roadmap: not built yet
Roadmap: a managed enterprise browser with clipboard, watermark and USB controls. Roadmap
Questions
Do people have to install anything?
Not to sign in. For a laptop to report its own posture checks, it needs the Pramaan desktop agent, with agent posture reports switched on.
Can someone fake what their laptop reports?
The agent's readings are self-reported: the report's signature proves which enrolled device sent it, not that its readings are true.
Does the unmanaged label block access?
Only through a rule: an access rule can name posture labels, such as unmanaged, and step up or deny a request from a device that carries such a label, or require a minimum score. By default the label weighs 12 in the score.
Which devices report unmanaged?
Windows and macOS devices the agent finds not centrally managed; Linux reads only a realm join and never reports it.
Does Pramaan add copy-and-paste controls to browser delivery?
Not of its own: Pramaan adds no clipboard, watermark or USB controls to browser-delivered sessions.
Talk to us, or try it first
-
Book a walkthrough
Against your own apps, not slides.
-
Run the lab
It uses a demonstration account; none of your data is involved.
-
See pricing
Published floors, named-user bands and what every tier includes.