Netskope Global Technical Success (GTS)

Google Chrome - Blocking Chrome Extensions

Netskope Cloud Version - 126

Objective

Block Google Chrome Extensions Installation and Download

Prerequisite

Netskope Next-Gen SWG license

Context

The business use case is to prevent users from installing browser extensions and add-ons in Google Chrome.

Do You Know?

• Google Chrome holds ~68% of the global web browser market share, making it the industry leader. Ref. - Link
• Google Chrome offers a dedicated platform called the Chrome Web Store, where users can discover, download, and manage extensions and add-ons.
• Netskope acknowledges Chrome Web Store as a Cloud Application and provides a pre-defined cloud app connector
• As of June 05, 2025 with Netskope’s Chrome Web Store predefined connector, customers can exercise control over the following activities:

• Google Chrome extensions are packaged in the .CRX (Chrome Extension) file format.

Configuration

To block Google Chrome extension installation and download, you need to do two things:

1. Block access to the Chrome Web Store – This stops users from browsing and installing extensions directly from the official site.
2. Block .CRX file downloads – Since Chrome extensions can also be installed from other websites, blocking .CRX files prevents extensions from being downloaded from anywhere else.

Block access to the Chrome Web Store

Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy

Block .CRX file downloads

Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy

Verification

• Access Chrome Web Store

Note - User Notification format used above Link

• try to download any .CRX file from the internet

Note - User Notification format used above Link

Author Notes

• With the above configuration, you are implementing controls to block the download of browser extensions and add-ons in Google Chrome.
• However, it's still possible for end users to manually install extensions by downloading or copy-pasting .CRX files on their machine from other sources.
• To achieve complete control over Google Chrome and prevent such actions, end-user devices should be managed through an MDM (Mobile Device Management) solution, allowing the IT team to enforce strict policies and maintain full control over the machines.
• It is also recommended to review -

Terms and Conditions

• All documented information undergoes testing and verification to ensure accuracy.
• In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

• This article is authored by Netskope Global Technical Success (GTS).
• For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.