App Control: How To Prevent Browser Plugins or Extensions

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To use the Agent to prevent the installation of unauthorized browser plugins or extensions.

Environment

• App Control Console: All Supported Versions
• App Control Agent: All Supported Versions

Resolution

It is possible this type of Custom Rule could have unexpected consequences. Please review the Additional Notes.

The use of a File Creation Control Rule would make it possible to instruct the Agent to Block writes to a specific path.

1. Determine the File Path the plugin/extension uses.
2. Login to the Console and navigate to Rules > Software Rules > Custom > Add Custom Rule:
   • Rule Type: File Creation Control
   • Write Action: Block
   • Path or File: **Relevant path(s) from the plugin/extension vendor for each browser**
   • Process: Any Process
3. Save & Enable the Custom Rule.

Additional Information

• Using the Agent to block File Creation in this manner may cause stability issues with browser updates or interoperability issues between the browser and desired applications.
• As always, extensive testing in the environment should be done first before deploying this type of Custom Rule.
• A better alternative may be to use GPO to restrict the installation of plugins/extensions by following the recommendations from Google, Microsoft, or Mozilla for their browsers.