How to Block browser extensions

KatiaNunez — Wed, 12 Jun 2019 15:39:43 GMT

Hello,

Does anybody know if it is possible to block specific browser extensions from being downloaded?

I would like to block the searchencrypt browser extension.

Thanks

Re: How to Block browser extensions

jvalentine — Wed, 12 Jun 2019 16:49:16 GMT

Have you enabled SSL Decryption? Since the Chrome Web Store runs over SSL, and if you're not using SSL Decryption, then your choice becomes permitting all extensions or blocking all extensions.

However, if you focus on the traffic generated by the "searchencrypt" extension - that's something much easier to target without collatteral damage. You're not necessarily stopping users from downloading the extension, but these options will prevent the extension from working.

The easiest way would be to use the URL Filtering engine and block the "proxy-avoidance-and-anonymizers" URL category - that will stop the searchencrypt extension from working. Two upsides to this method: 1.) it would block other/similar extensions which have been categorized as proxies by our URL filtering engine, and 2.) it can provide some visual feedback through the URL Response Pages. The error page can be customized to your environment and provide additional information to the user receiving the message.

Here's a screenshot after blocking that URL category:

If you don't have the URL filtering subscription, I believe you can still create custom URL categories. Add "searchencrypt.com" and "*.searchencrypt.com" to a custom URL category and deny access to that category.

Another option if you don't have the URL filtering subscription: create a custom AppID signature. I configured one that looks for "searchencrypt.com" in the SSL Response Certificate context of the SSL decoder. Here's a screenshot with most of the information you'd need to create the custom application signature:

And here's a screenshot from the traffic log showing it blocking based on the custom AppID signature:

Re: How to Block browser extensions

KatiaNunez — Wed, 12 Jun 2019 17:14:12 GMT

@jvalentinethanks for your help.

I will try with blocking the url. If that does not work, I will use the other 2 suggestions you explained. 🙂

topic Re: How to Block browser extensions in General Topics

How to Block browser extensions

Re: How to Block browser extensions

Re: How to Block browser extensions