Why does Prisma Browser display the 'ERR_PROXY_CERTIFICATE_INVALID' error for private apps or internet?

Prisma Browser displays ERR_PROXY_CERTIFICATE_INVALID error when accessing private apps or internet.
 

• Prisma Access
• Prisma Browser (Formerly Prisma Access Browser)

• The traffic from Prisma Browser to Prisma Access Explicit Proxy is subject to SSL decryption.
• Since the Prisms Browser by default does not trust unknown CA (For example an organisation's CA certificate which is decrypting all the traffic), the communication fails with error "ERR_PROXY_CERTIFICATE_INVALID"

1. Refer to the Prisma Browser prerequisites, which list the FQDNs that must be allowed and excluded from decryption for your specific region.
2. Configure the upstream firewall or security device to exclude the Explicit Proxy FQDN from decryption. (The FQDN can be found under prisma://troubleshoot/ section in Prisma Access integration section.

3. Alternatively, Import the decryption CA certificate in Prisma Browser security policy as a Trusted certificate. This will make sure the browser trusts the connection to EP FQDN even with decryption.