Blocking the chrome extension(crx) except for Symantec chrome extension

Products

• ISG Proxy
• SWG VA-100
• ProxySG Software - SGOS

Issue/Introduction

Permit a particular extension without allowing users to download any other Chrome extensions. 

Environment

ISG, Edge SWG (formerly ProxySG)

Resolution

For Blocking and preventing users from downloading Chrome extensions (crx) except for particular extensions for example Symantec Chrome , you can achieve that by doing the following:

Assume that in the current scenario, the URL for the Symantec extension on the Chrome store is as follows

https://chrome.google.com/webstore/detail/symantec-extension/dehobbhellcfbmcaeppgfjhnldeimdph

The Chrome extension in this scenario has the indexation/ID on the store "dehobbhellcfbmcaeppgfjhnldeimdph"

1. First, add a rule that will block all .crx files in one layer.
   

2. In a new rule that is above the deny rule you need to have a rule that allows Symantec Chrome extension URL path id :

 

 

Therefore, attempting to download any Chrome extension will result in an access denied.

 

However, when you attempt to download the Symantec extension, the first rule will match and allow before being evaluated on the any crx deny rule: