topic Re: unable to block google chrome updates in General Topics

unable to block google chrome updates

SThatipelly — Thu, 10 Jun 2021 16:36:21 GMT

I blocked 'google-update' app in firewall rules but I still see some of the users' browsers getting updated. I can't find any helpful logs for those users.

Please let me know a solid way I can blocked google updates on Palos.

TIA.

Re: unable to block google chrome updates

BPry — Sat, 12 Jun 2021 03:33:36 GMT

@SThatipelly,

I have to admit I've never attempted to actively block users from having the latest build of Chrome, generally I spend more time king sure that they actually do have the latest updates. Do you have decryption setup on outbound traffic for these users?

Re: unable to block google chrome updates

SThatipelly — Sun, 13 Jun 2021 01:21:12 GMT

We have a critical application that breaks with certain google chrome updates. we test the updates prior to pushing to clients. so, I'm trying to block automatic updates. I have decryption enabled.

Re: unable to block google chrome updates

BPry — Sun, 13 Jun 2021 04:05:12 GMT

@SThatipelly,

I would guess that even with decryption google-update simply isn't capable of identifying traffic correctly quick enough to prevent this traffic from falling back to google-base. I would attempt to identify the traffic that is getting captured as the wrong app-id and get a PCAP so you can send it in as an app-id signature enhancement request.