Webapp-based content fingerprinting tag and Chrome DLP Extension

[User21257322]

Hi Heroes,

Does the webapp-based tag relies on DLP Chrome Extension?

From what I can recall, we just need to ensure "Browser Address Bar URL detection" enabled in the Windows Client Configuration policy.

But I just tested with Chrome v87, without the DLP extension, the file downloaded is not tagged at all.

Am I misunderstanding something?

Thanks..

[Corey-DLP]

Hello and thank you for posting here!

Can you tell me what version of the DLP Agent you have installed on the client system you're testing?

[User21257322]

Hi @Corey-DLP , DLP 11.6 Agent 5.6.6 ePO 5.10U9

[User21257322]

Hi @Corey-DLP , sorry for pinging you again! can you let me know if webapp-based tag requires DLP Chrome extension to be present? thanks!!!

[Corey-DLP]

Hello and thank you for your reply.

Since the browser address bar URL setting is required for Web Application Content Fingerprinting to work, this would also mean that the module for the respective browser your are using would also need to be enabled. In your case, this would enable the DLP Extension in Chrome. Without the extension, DLP will not be able to analyze the URL from which the file is being downloaded. For next steps, I would test with the DLP Chrome Extension enabled. If files are still not being tagged, I would open an SR with McAfee Support for further investigation. 

[User21257322]

Thanks. so the DLP Extension for Chrome is mandatory, correct? I have tested once I installed the extension the files downloaded can be tagged correctly.

The reason I ask here is that we are in the China region, my customers dont have internet access to Chrome Web Store to install the extension... We also tried to create an offline .crx DLP extension file and install it but it's not working at all.

[Corey-DLP · Accepted solution]

That is correct. The DLP Chrome Extension would be required. For this to be enabled, the DLP Agent must be able to download it from the Chrome App Store. Unfortunately, manually installing the extension is not supported and in my experience, does not work.