Video Screencast Help

Symantec DLP not preventing uploads via Google Chrome browser.

Created: 17 Nov 2013 • Updated: 18 Nov 2013 | 4 comments
This issue has been solved. See solution.

I am currently working on a DLP solution for my company. However, I've just read on the forum that Google Chrome is not natively supported in terms of blocking data such as uploading attachments etc via HTTPS. I have added Chrome to application monitoring. Based on my tests, Symantec DLP is able to catch uploads that are on HTTP but not on HTTPS on Google Chrome. Both HTTPS and HTTP works on IE. I have yet to test for Firefox. 

Is there any workaround for this issue? My concern is users using gmail to upload confidential documents via HTTPS and Symantec DLP is unable to capture that event.

Operating Systems:

Comments 4 CommentsJump to latest comment

John Gruhn's picture

While there is not a workaround for the agent you could still detect the information via Web Prevent assuming you have the right proxy (ie Bluecoat or Webwasher). The Web Prevent solution would also cover your systems that done have endpoints installed such as your servers.

SOLUTION
hjerold's picture

Hi John,

Thank you for your reply. At this point of the DLP implementation, we are looking at the capabilities of the agent as a start. Yes, the Web Prevent solution will solve this problem, but personally I think the lack of support for Google Chrome (the most commonly used web browser now) is disappointing.

John Gruhn's picture

Google Chrome is the most popular browser for consumers but for business (the target for DLP implementations) its still mostly IE and Firefox. As Chrome continues to get more and more marketshare in business Im sure we will add it to HTTS monitoring.

jjesse's picture

I would like to echo this statement.  I find Chrome being used more and more and Firefox being used less and less when I visit customers.  Even if local admin isn't given to the end user he or she can install Chrome as it installs into the local profile.  It would be great if we could add full support to Chrome instead of having to customize it through application monitoring.

Jonathan Jesse Practice Principal ITS Partners