SEP compatibility with Chrome Network Service Sandbox

Products

• Endpoint Security
• Endpoint Protection

Issue/Introduction

Will Symantec Endpoint Protection (SEP) agent be able to support the following upcoming changes from Google Chrome?

https://chromeenterprise.google/policies/#NetworkServiceSandboxEnabled

 

Environment

 

 

Cause

“As early as Chrome 100, to improve security and reliability, the network service, already running in its own process, will be sandboxed on Windows. As part of this, third-party code that is currently able to tamper with the network service may be prevented from doing so. This might cause interoperability issues with software that injects code into Chrome's process space, such as Data Loss Prevention software. The NetworkServiceSandboxEnabled policy allows you to disable the sandbox if incompatibilities are discovered. You can test the sandbox in your environment using these instructions and report any issues you encounter.”

Resolution

The Browser IPS and Web extension don’t hook at the Chrome Network Service Sandbox level so it should not impact Symantec Endpoint Protection.

Additional Information

Related article from Data Loss Prevention and Data Loss Prevention Endpoint Prevent

Chrome detection fails with Network Service Sandbox Enabled
https://knowledge.broadcom.com/external/article?articleId=233747