Allow Only Google-Chrome Update and Block all other google related pages

[Muruganandham.SP]

Hi Team,

The Google and Google related products/pages are completely restricted at our environment.

We only allow a specific destinations from our internal Application servers.

To remediate the vulnerability risks, we are in need of updating the google-chrome periodically.

Could we get an inputs in allowing the google-chrome updates alone, and block all remaining as it is before.

Thanks,
SPM

[svrcina_jan]

Hello,

There would need to be an APP-ID for that and to my knowledge, there isn't one for Chrome updates.

You can take a look at Applipedia yourself here - https://applipedia.paloaltonetworks.com

You might need to give up Chrome and use another browser, such as Firefox, for which there is na APP-ID for updates - firefox-update

[Muruganandham.SP]

There is something called google-update. Unsure if that would help us on this requirement.

Also, wondering if we could get any whitelisted URLs specific to google update alone.

[RobertShawver]

Hi @Muruganandham.SP 

If your company is that restrictive, why not cut it all off and only update the environment with Chrome from something like SCCM?

Otherwise, check out this article:

https://support.google.com/chrome/a/forum/AAAARjBu3mE-ksnOfMiW2Y/?hl=en&gpf=%23!topic%2Fchrome-admin... and more specifically https://support.google.com/chrome/a/answer/6350036?hl=en&visit_id=637795771500387342-2663930445&rd=1...

Hope this helps.

[Muruganandham.SP]

@RobertShawver  Yes, we had this discussed internally. The present idea here is to execute it via firewall and to find all the possible available solutions in PAN-FW.