App Control: How To Prevent Browser Plugins or Extensions
book
Article ID: 286557
calendar_today
Updated On:
Products
Carbon Black App Control (formerly Cb Protection)
Issue/Introduction
To use the Agent to prevent the installation of unauthorized browser plugins or extensions.
Environment
App Control Console: All Supported Versions
App Control Agent: All Supported Versions
Resolution
It is possible this type of Custom Rule could have unexpected consequences. Please review the Additional Notes.
The use of a File Creation Control Rule would make it possible to instruct the Agent to Block writes to a specific path.
Determine the File Path the plugin/extension uses.
Login to the Console and navigate to Rules > Software Rules > Custom > Add Custom Rule:
Rule Type: File Creation Control
Write Action: Block
Path or File: **Relevant path(s) from the plugin/extension vendor for each browser**
Process: Any Process
Save & Enable the Custom Rule.
Additional Information
Using the Agent to block File Creation in this manner may cause stability issues with browser updates or interoperability issues between the browser and desired applications.
As always, extensive testing in the environment should be done first before deploying this type of Custom Rule.
A better alternative may be to use GPO to restrict the installation of plugins/extensions by following the recommendations from Google, Microsoft, or Mozilla for their browsers.