How to block browsec extension (proxy avoidance tool)

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

Browsec is an easy to install extension for Google Chrome and Firefoex which will create a VPN, bypassing the ProxySG policies. The user will be able to able to access unwanted sites against the organization's policy.

Cause

Blocking browsec.com domain will not stop the extension as the extension will also connect to postlm.com and postls.com

Resolution

To block the Browsec extension, you will need to create a VPM rule which will block destination URL IP/host name

• browsec.com
• postlm.com
• postls.com

You can also create a CPL to block those sites. The CPL code is
sdf
<proxy>
url.domain="browsec.com" force_deny
url.domain="postlm.com" force_deny
url.domain="postls.com" force_deny
request.header.Referer="browsec.com" force_deny


In order to block browsec extension installation on Chrome and Firefoex
<proxy>
request.header.Referer="chrome.google.com/webstore/search/browsec-vpn-privacy-and-s" force_deny
request.header.Referer="browsec-vpn-privacy-and-s" force_deny
request.header.Referer="chrome.google.com/webstore/search/just-proxy-vpn-hide-ip- " force_deny
request.header.Referer="just-proxy-vpn-hide-ip- " force_deny
request.header.Referer="addons.mozilla.org/firefox/addon/browsec" force_deny
request.header.Referer="browsec" force_deny