Blocking the chrome extension(crx) except for Symantec chrome extension

Products

• ISG Proxy
• SWG VA-100
• ProxySG Software - SGOS

Issue/Introduction

Permit a particular extension without allowing users to download any other Chrome extensions. 

Environment

ISG, Edge SWG (formerly ProxySG)

Resolution

For Blocking and preventing users from downloading Chrome extensions (crx) except for particular extensions for example Symantec Chrome , you can achieve that by doing the following:

Assume that in the current scenario, the URL for the Symantec extension on the Chrome store is as follows

https://chrome.google.com/webstore/detail/symantec-extension/dehobbhellcfbmcaeppgfjhnldeimdph

as can be observed the Chrome extension in this scenario has the indexation/ID on the store "dehobbhellcfbmcaeppgfjhnldeimdph"

1. first, you need to have a rule that will block all .crx files in one layer.
   
   
   

2. And in a separate layer that comes in below order of the previous deny rule you need to have a rule that allows Symantec Chrome extension URL path id :

 

Therefore, attempting to download any Chrome extension will result in an access denied.

 

However, when you attempt to download the Symantec extension, the most recent created allow rule will override the previous deny rule from the earlier layer: