Environment
- App Control Console: All Supported Versions
- App Control Agent: All Supported Versions
Objective
To use the Agent to prevent the installation of unauthorized browser plugins or extensions.
Resolution
| It is possible this type of Custom Rule could have unexpected consequences. Please review the Additional Notes. |
The use of a File Creation Control Rule would make it possible to instruct the Agent to Block writes to a specific path.
- Determine the File Path the plugin/extension uses.
- Login to the Console and navigate to Rules > Software Rules > Custom > Add Custom Rule:
- Rule Type: File Creation Control
- Write Action: Block
- Path or File: **Relevant path(s) from the plugin/extension vendor for each browser**
- Process: Any Process
- Save & Enable the Custom Rule.
Additional Notes
- Using the Agent to block File Creation in this manner may cause stability issues with browser updates or interoperability issues between the browser and desired applications.
- As always, extensive testing in the environment should be done first before deploying this type of Custom Rule.
- A better alternative may be to use GPO to restrict the installation of plugins/extensions by following the recommendations from Google, Microsoft, or Mozilla for their browsers.
Related Content
