From cb2b4a840d7f91a54b749995d03f2b9512aa3fc4 Mon Sep 17 00:00:00 2001 From: Michael Jon <9003059+BiosPlus@users.noreply.github.com> Date: Fri, 9 Aug 2024 15:53:48 +1000 Subject: [PATCH] more details --- .../Google Chrome/managed-browser-settings.md | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/docs/google-workspace/Google Chrome/managed-browser-settings.md b/docs/google-workspace/Google Chrome/managed-browser-settings.md index 75ba52b..082d798 100644 --- a/docs/google-workspace/Google Chrome/managed-browser-settings.md +++ b/docs/google-workspace/Google Chrome/managed-browser-settings.md @@ -34,23 +34,26 @@ If you're managing a Google Workspace instance/tenancy, you'll want this turned ### Chrome Enterprise Connectors +- Hashes are generated for uploaded/downloaded files +- Huge text pastes are analysed for potential PII exfiltration. +- Visits to malicious URLs (w/ the red advisory block screen) are logged + graded on severity. + - Bypasses of that advisory are logged and reported. + | Policy | Setting | Shortcode | URL | |---|-----|----------|:-:| | Upload content analysis | [More info to come] | OnFileAttachedEnterpriseConnector | [Link](https://admin.google.com/ac/chrome/settings/user?ref=browser&f=POLICY_NAME.OnFileAttachedEnterpriseConnector&table-view=false) | | Download content analysis | [More info to come] | OnFileDownloadedEnterpriseConnector | [Link](https://admin.google.com/ac/chrome/settings/user?ref=browser&f=POLICY_NAME.OnFileDownloadedEnterpriseConnector&table-view=false) | | Bulk text content analysis | [More info to come] | OnBulkDataEntryEnterpriseConnector | [Link](https://admin.google.com/ac/chrome/settings/user?ref=browser&f=POLICY_NAME.OnBulkDataEntryEnterpriseConnector&table-view=false) | | Print content analysis | [More info to come] | OnPrintEnterpriseConnector | [Link](https://admin.google.com/ac/chrome/settings/user?ref=browser&f=POLICY_NAME.OnPrintEnterpriseConnector&table-view=false) | -| Upload content analysis | Chrome Enterprise Premium | EnterpriseRealTimeUrlCheckMode | [Link](https://admin.google.com/ac/chrome/settings/user?ref=browser&f=POLICY_NAME.OnFileDownloadedEnterpriseConnector&table-view=false) | - - +| Real time URL check | Chrome Enterprise Premium | EnterpriseRealTimeUrlCheckMode | [Link](https://admin.google.com/ac/chrome/settings/user?ref=browser&f=POLICY_NAME.OnFileDownloadedEnterpriseConnector&table-view=false) | ### Chrome Updates The goals here are simply: -- Get browsers to update within 24 hours of a release. +- Get browsers to update within 48 hours of a release. - Have Chrome check every 300 mins to see if there's an update. - Use a friendly endpoint for checking (cacheable url). -- Don't bother users prior to 9:30, so they can get their morning meets done. +- Use the extended stable channel for stability and due to the amount of updates the chrome team tend to push a day on the latest channel in comparison (Sometimes several times a day on latest). | Policy | Setting | Shortcode | URL | |---|-----|----------|:-:|