Netskope Global Technical Success (GTS)
Microsoft Edge - Blocking Browser Extensions
Netskope Cloud Version - 133
Objective
Block Microsoft Edge extensions and add-ons.
Prerequisite
Netskope Next-Gen SWG license
Context
The business use case is to prevent users from installing browser extensions and add-ons in Microsoft Edge
Do You Know?
- Microsoft Edge does offer a dedicated platform called the Microsoft Edge Add-ons, where users can discover, download, and manage extensions and add-ons.
- Microsoft Edge extensions are packaged in the .CRX (Chrome Extension) file format.
- One thing to note is that Google Chrome and Microsoft Edge are built on the same platform: Chromium
Configuration
To block Microsoft Edge Add-ons extensions, you need to do two things:
- Block access to the Microsoft Edge Add-ons – This stops users from browsing and installing extensions directly from the official site.
- Block .CRX file downloads – Since Chrome extensions can also be installed from other websites, blocking .CRX files prevents extensions from being downloaded from anywhere else.
Block access to the Microsoft Edge Add-ons
Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> Policies >>> URL Lists >>> New URL Lists
Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> Policies >>> Custom Categories >>> New Category
Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy
Block .CRX file downloads
Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy
Verification
- Access Microsoft Edge Add-ons
Note - User Notification format used above Link
- Block .CRX file
From Internet the moment you try to download any file with .crx extension it will be blocked
Author Notes
- With the above configuration, you are implementing controls to block the download of browser extensions and add-ons in Microsoft Edge.
- However, it's still possible for end users to manually install extensions by downloading or copy-pasting .CRX files on their machine from other sources.
- To achieve complete control over Microsoft Edge and prevent such actions, end-user devices should be managed through an MDM (Mobile Device Management) solution, allowing the IT team to enforce strict policies and maintain full control over the machines.
- It is also recommended to review -
Terms and Conditions
- All documented information undergoes testing and verification to ensure accuracy.
- In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.
Notes
- This article is authored by Netskope Global Technical Success (GTS).
- For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.
