topic Allow Only Google-Chrome Update and Block all other google related pages in General Topics

Allow Only Google-Chrome Update and Block all other google related pages

Muruganandham.SP — Fri, 04 Feb 2022 07:52:43 GMT

Hi Team,

The Google and Google related products/pages are completely restricted at our environment.

We only allow a specific destinations from our internal Application servers.

To remediate the vulnerability risks, we are in need of updating the google-chrome periodically.

Could we get an inputs in allowing the google-chrome updates alone, and block all remaining as it is before.

Thanks,
SPM

Re: Allow Only Google-Chrome Update and Block all other google related pages

svrcina_jan — Fri, 04 Feb 2022 11:44:51 GMT

Hello,

There would need to be an APP-ID for that and to my knowledge, there isn't one for Chrome updates.

You can take a look at Applipedia yourself here - https://applipedia.paloaltonetworks.com

You might need to give up Chrome and use another browser, such as Firefox, for which there is na APP-ID for updates - firefox-update

Re: Allow Only Google-Chrome Update and Block all other google related pages

Muruganandham.SP — Fri, 04 Feb 2022 12:57:55 GMT

There is something called google-update. Unsure if that would help us on this requirement.

Also, wondering if we could get any whitelisted URLs specific to google update alone.

Re: Allow Only Google-Chrome Update and Block all other google related pages

RobertShawver — Fri, 04 Feb 2022 13:16:39 GMT

Hi @Muruganandham.SP

If your company is that restrictive, why not cut it all off and only update the environment with Chrome from something like SCCM?

Otherwise, check out this article:

https://support.google.com/chrome/a/forum/AAAARjBu3mE-ksnOfMiW2Y/?hl=en&gpf=%23!topic%2Fchrome-admins%2F-ksnOfMiW2Y and more specifically https://support.google.com/chrome/a/answer/6350036?hl=en&visit_id=637795771500387342-2663930445&rd=1#zippy=%2Cwhat-urls-are-used-for-chrome-browser-updates

Hope this helps.

Re: Allow Only Google-Chrome Update and Block all other google related pages

Muruganandham.SP — Fri, 04 Feb 2022 13:31:08 GMT

@RobertShawver Yes, we had this discussed internally. The present idea here is to execute it via firewall and to find all the possible available solutions in PAN-FW.