Data Leakage Prevention Browser Configurations

Configuring Data Leakage Prevention

Kindly follow the steps given below to successfully create and deploy Data Leakage Prevention policy:

1. Open Endpoint Central console and navigate to Browsers -> Policies -> Data Leakage Prevention.
2. Click Create Policy and select the OS platform.
3. Give a name for the policy.
4. Refer below to know more about the Data Leakage Prevention settings.
5. Click Save to save the policy as draft. Click Save & Publish to save the policy.
6. Associate the policy to computers/groups of computers in which you want the isolation of web-applications to take place.


Note

This page configures browser controls. For conditional browser upload/download rules, see File Activity Restriction. Endpoint DLP is a separate module with its own entitlement and supported channels. Do not assume a Browser Security setting provides endpoint-wide coverage.

Settings under Data Leakage Prevention

This document will explain each configuration under Data Leakage Prevention provided by Endpoint Central and the browsers it is applicable for.

Configuration	Description	Supported Browsers	Supported Platforms
Print webpage	Restrict this setting to disable webpage printing in the browser. This setting controls printing permission; it does not configure the print dialog's scale, Fit to paper, paper size or number of copies.	Chrome, Edge, Ulaa	Windows, Mac
Automatic browser sync	By disabling this, syncing details such as bookmarks, passwords, browser themes will be disabled.	Chrome, Edge, Firefox, Ulaa, Chromium Browsers	Windows, Mac
Autofill	By disabling this, Auto filling to the form is restricted.	Chrome, Edge, Internet Explorer, Ulaa, Chromium Browsers	Windows, Mac
File upload to webpages	By Restricting this, File upload to the web pages are restricted. Note: This only disables the upload using the File selection dialog box, where as drag and drop or copy-paste will still work.	Chrome, Edge, Ulaa, Chromium Browsers	Windows, Mac
Screen Capture and Mirroring	By restricting this, screen capturing, screen mirroring using Google Chrome Cast will be disabled. Note: Here screen capture is prevented when either site or browser extension try to take a screenshot, still end user can able to take screenshot using the Windows or Mac shortcuts such as Snipping Tool, etc.,	Chrome, Edge	Windows, Mac
Remember passwords	This policy controls whether the browser remembers passwords, enabling or disabling the automatic saving of login credentials for websites to facilitate easier access during future visits. Note: In Chrome and Edge, disabling this setting prevents the browser from saving new passwords. Passwords saved before the setting was applied remain available for use. Remove existing saved passwords separately if required.	Chrome, Edge, Internet Explorer, Firefox, Ulaa, Chromium Browsers	Windows, Mac
Site per process	This policy enables site per process in the browser, isolating each website in its own process for enhanced security and stability, preventing one site from affecting others or accessing data across different sites.	Chrome, Edge, Ulaa, Chromium Browsers	Windows, Mac
Search Suggestions	This policy controls whether search suggestions are shown in the browser's address bar or search box, allowing or preventing the browser from displaying autocomplete suggestions as users type in search queries.	Chrome, Edge, Ulaa, Chromium	Windows, Mac
Metrics reporting to Google	This policy controls whether the browser sends metrics and usage data to Google, enabling or disabling the reporting of information like performance data, errors, and other usage statistics to help improve Google services.	Chrome, Edge, Ulaa	Windows, Mac
Prompt for download location	This policy controls whether the browser prompts users for a download location each time they download a file, allowing or preventing the automatic saving of files to the default download folder.	Chrome, Edge, Ulaa, Chromium	Windows, Mac
Browser history deletion	By disabling this, end user cannot delete the browser history that they have visited.	Chrome, Edge, Ulaa, Chromium	Windows, Mac
Background processing	By disabling this, the background processing of browser process will be disabled.	Chrome, Edge, Ulaa, Chromium	Windows
Network Prediction	This policy controls whether the browser uses network prediction to preload content, such as DNS lookups and page resources, to improve browsing speed by anticipating user actions.	Chrome, Edge, Ulaa, Chromium	Windows, Mac
GenAI DLP Protection	Enable - When enabled, users are prevented from typing, pasting, or submitting Personally Identifiable Information (PI) on Generative AI websites such as ChatGPT. Audit - PII-related activities on Generative AI websites are monitored and logged. Administrators can review the detected data and related events through Browser Audit Reports. For an unexpected detection, record the displayed data-type label, affected site, browser/extension version, policy mode and event time. Review the corresponding Browser Audit event and its available remarks. On Windows, reported events can contain the site URL and detected PII type. A label such as API KEY describes the reported detection category; it does not by itself prove why a particular URL matched. Send a sanitized example and the event details to support. Do not include actual API keys, passwords or personal data in the example.	Chrome, Edge, Ulaa, Chromium browsers	Windows, Mac
Email tracker	Specify the email domain(s)to be monitored for email activity tracking in [example.com] format. Multiple accounts or domains can be configured as needed. The email activity can be viewed and exported in the Audit Reports. It will include the matched URL and the tracked email ID.	Chrome, Edge, Firefox, Ulaa, Chromium browsers	Windows, Mac
Third Party Cookies	Always Allow - Allow the Third party cookies Never Allow - Restrict Third Party Cookies Allow in Visited websites - Allow the cookies in the site that you have already visited.	Firefox	Windows, Mac