Configuration policy for the OnFileTransfer Chrome Enterprise Connector
Last updated October 8, 2024
List of Chrome Enterprise Connectors services settings to be applied to the Google ChromeOS.
The source_destination_list, tags, enable and disable fields are used to determine if the connector should send a file for analysis when it is transferred between a source and a destination and what tags to include in the analysis request for that file. A tag corresponding to an 'enable' rule will be included in the analysis request if the source and destination match the rule associated to that tag as long as no 'disable' rule with that same tag matches the transfer. The analysis occurs if at least 1 tag is to be included in the request. A source_destination_list rule is defined by a list of pairs, where each pair contains a list of sources and a list of destinations. The file_system_type defines for which file system a rule should apply.
The service_provider field identifies which analysis service provider the settings correspond to.
The Google ChromeOS will wait to get a response from the analysis service before allowing the transfer. Any other integer value means Google ChromeOS allows the transfer immediately.
The Google ChromeOS will not allow users to transfer the file if an error occurs while communicating with the analysis service. Any other value means Google ChromeOS allows transfers of the file if an error occurs while communicating with the analysis service.
The Google ChromeOS blocks or allows files that are password protected.
The Google ChromeOS blocks or allows files that are too large to be analyzed.
The require_justification_tags field is used to determine for which tags the connector should require the user to enter a justification to bypass a scan that results in a bypassable warning. If the field is not set, it's assumed that a justification is not required.
The custom_messages, message, learn_more_url, language and tag fields are used to configure a message to show the user when a warning is shown after a scan had a non-clean verdict. The message field contains the text to show the user and should have at most 200 characters. The learn_more_url field contains an admin-provided URL that will be clickable by the user to get more customer-provided information about why the action was blocked. The language field is optional and contains the language of the message. An empty language field or a value of 'default' indicates a message to be used when the user's language doesn't have a message. The tag field specifies for which type of scans the message is displayed. The custom_messages list can have zero or more entries, where each entry is required to have non-empty message and tag fields.
This policy requires additional setup to take effect, please visit https://support.google.com/chrome/a?p=chrome_enterprise_connector_policies_setting for more information.
Supported On:
Platform
Start
End
ChromeOS
108
Example value:
{"0":{"enable":{"0":{"tags":{"0":"malware"},"source_destination_list":{"0":{"sources":{"0":{"file_system_type":"*"}},"destinations":{"0":{"file_system_type":"MY_FILES"}}}}},"1":{"tags":{"0":"dlp"},"source_destination_list":{"0":{"sources":{"0":{"file_system_type":"MY_FILES"},"1":{"file_system_type":"SMB"}},"destinations":{"0":{"file_system_type":"*"}}}}}},"disable":{"0":{"tags":{"0":"dlp"},"source_destination_list":{"0":{"sources":{"0":{"file_system_type":"*"}},"destinations":{"0":{"file_system_type":"ARC"},"1":{"file_system_type":"SMB"},"2":{"file_system_type":"MY_FILES"}}}}}},"default_action":"allow","custom_messages":{"0":{"tag":"dlp","message":"Custom message for potential sensitive data leaks.","language":"default","learn_more_url":"moreinfo.example.com"},"1":{"tag":"dlp","message":"Message pour une fuite de données potentielle.","language":"fr-CA","learn_more_url":"moreinfo.example.com/fr"}},"service_provider":"Google","block_large_files":false,"block_until_verdict":0,"block_password_protected":true,"require_justification_tags":{"0":"dlp"}}}