Configuration policy for the OnFileAttached Chrome Enterprise Connector
Last updated October 8, 2024
List of Chrome Enterprise Connectors services settings to be applied to the OnFileAttached Enterprise Connector, which triggers when a file is attached to Chrome.
The url_list, tags, enable and disable fields are used to determine if the connector should send a file for analysis when it is attached to a specific page and what tags to include in the analysis request for that file. A tag corresponding to an 'enable' pattern will be included in the analysis request if the page URL matches a pattern associated to that tag as long as no 'disable' pattern with that same tag matches the page URL. The analysis occurs if at least 1 tag is to be included in the request.
The service_provider field identifies which analysis service provider the settings correspond to.
The block_until_verdict field being set to 1 means Chrome will wait to get a response from the analysis service before giving the page access to the file. Any other integer value means Chrome gives the page access to the file immediately.
The default_action field being set to block means Chrome will not give the page access to the file if an error occurs while communicating with the analysis service. Any other value means Chrome gives the page access to the file.
The block_password_protected field controls whether Chrome blocks or allows files that are password protected.
The block_large_files fields controls whether Chrome blocks or allows files that are too large to be analyzed.
The require_justification_tags field is used to determine for which tags the connector should require the user to enter a justification to bypass a scan that results in a bypassable warning. If the field is not set, it's assumed that a justification is not required.
The custom_messages, message, learn_more_url, language and tag fields are used to configure a message to show the user when a warning is shown after a scan had a non-clean verdict. The message field contains the text to show the user and should have at most 200 characters. The learn_more_url field contains an admin-provided URL that will be clickable by the user to get more customer-provided information about why the action was blocked. The language field is optional and contains the language of the message. An empty language field or a value of 'default' indicates a message to be used when the user's language doesn't have a message. The tag field specifies for which type of scans the message is displayed. The custom_messages list can have zero or more entries, where each entry is required to have non-empty message and tag fields.
This policy requires additional setup to take effect, please visit https://support.google.com/chrome/a?p=chrome_enterprise_connector_policies_setting for more information.
Supported On:
Platform
Start
End
Chrome (Windows, Mac, Linux)
84
ChromeOS
84
Example value:
{"0":{"enable":{"0":{"tags":{"0":"malware"},"url_list":{"0":"*"}},"1":{"tags":{"0":"dlp"},"url_list":{"0":"*.them.com","1":"*.others.com"}}},"disable":{"0":{"tags":{"0":"malware"},"url_list":{"0":"*.us.com"}}},"verification":{"mac":{"0":"key"},"linux":{"0":"key"},"windows":{"0":"key"}},"default_action":"allow","custom_messages":{"0":{"tag":"dlp","message":"Custom message for potential sensitive data leaks.","language":"default","learn_more_url":"moreinfo.example.com"},"1":{"tag":"malware","message":"Custom message for potential malware file transfer.","language":"en-US","learn_more_url":"moreinfo.example.com/en"},"2":{"tag":"malware","message":"Message pour le transfert de logiciel malveillant.","language":"fr-CA","learn_more_url":"moreinfo.example.com/fr"}},"service_provider":"google","block_large_files":false,"block_until_verdict":0,"block_password_protected":true,"require_justification_tags":{"0":"malware","1":"dlp"}}}