What is the Secure Browsing security control?

Web Browsing security is the application of internet security to web users to protect networked data and computer systems from breaches of privacy or malware.

 

Browsing protection helps users to evaluate the safety of websites they visit and prevents them from unintentionally accessing harmful payloads.

 

By identifying websites that contain security threats, such as malware (viruses, worms, trojans) or redirects from phishing emails, browsing protection helps you avoid accessing the site and prevent the download from happening.

 

Today, only Google Chrome on Desktop is supported.

The protection is based on the Chrome extension and is available on the main browser, not including incognito (by default). As part of Google Chrome's Extensions general policy, there is also an option to enable working incognito.

 

FYI: The admin will be notified of an issue when a user accesses a malicious website, and the user will not be notified. The website record will not be logged and saved by Guardz.

 

Secure Browsing Capabilities

  • Status Browser unsupported version detection - Checking if the used browser version is known to have security vulnerabilities. In some cases, we check for the Operating System version (Mac only)

  • Unsafe browsing activity monitoring - checking if the user accessed - malware, phishing,  unwanted software, etc., And alerting the admin with an issue.

  • Unsafe downloading activity monitoring

  • Social engineering/phishing detection -  checking if the user accessed a phishing website and alerting the admin with an issue.

     

 

Secure Browsing Distribution Options

To protect the user's device, the user will need to download a browser extension to their desktop device.

There are three ways of sending it to end users:

 

  1. Send installation instructions to users: Send an Email  

    Send your users an email with instructions on downloading the extension. 

    Go to Control Center > Secure Browsing > Deploy > Send an Email

     

    • Send from Guardz

      The end user will receive the download instructions from Guardz’s email address. It’s quick and easy! But you won’t be able to edit the email - subject, copy, and email address. 

    • Open in your email

      Using this, your default email platform will open with all the information: user list, subject, and body. You’ll have the option to edit the email copy content, including the subject line, and send it from your familiar email address. DO NOT change the URLs. Make sure to click “Done” to save all changes.

    • Skip Email

      Using this option, you can assign the campaign to the users without sending them an official email. Accessing the user portal can be done using other ways.

       

  2. Install the extension manually 

    for Chrome - using this option, the download page of the Chrome extension will open, and the admin will have the opportunity to copy the URL and send it to his end-users.

    Navigate to Control Center > Secure Browsing > Deploy > for Chrome

     

  3. Install the extension using Google Workspace 

    Force the extension on employees through the admin portal of the Google Workspace account.

    See more information here: https://support.google.com/chrome/a/answer/6306504?hl=en

 

Secure Browsing Issue Types and Remediations

Guardz will notify the admin on issues such as a user accessing a malicious website, extension presence, etc. And offer remediations to handle each case accordingly. 

 

 

FAQ Web Browsing Protection

  • Question: How can I test the Web Browsing protection?

    • ?Answer: After installing and logging in to the extension, you can navigate to one of the following URLs and expect to see a detection Add the first string and then add the second one at the end of it "...com/s/.."