App Control: How To Prevent Browser Plugins or Extensions
search cancel

App Control: How To Prevent Browser Plugins or Extensions

book

Article ID: 286557

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To use the Agent to prevent the installation of unauthorized browser plugins or extensions.

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Resolution

It is possible this type of Custom Rule could have unexpected consequences. Please review the Additional Notes.

The use of a File Creation Control Rule would make it possible to instruct the Agent to Block writes to a specific path.
  1. Determine the File Path the plugin/extension uses.
  2. Login to the Console and navigate to Rules > Software Rules > Custom > Add Custom Rule:
    • Rule Type: File Creation Control
    • Write Action: Block
    • Path or File: **Relevant path(s) from the plugin/extension vendor for each browser**
    • Process: Any Process
  3. Save & Enable the Custom Rule.

Additional Information

  • Using the Agent to block File Creation in this manner may cause stability issues with browser updates or interoperability issues between the browser and desired applications.
  • As always, extensive testing in the environment should be done first before deploying this type of Custom Rule.
  • A better alternative may be to use GPO to restrict the installation of plugins/extensions by following the recommendations from Google, Microsoft, or Mozilla for their browsers.