Browser Defense

 

Browser Defense (ex Password Protection) helps secure the passwords stored in web browsers. If left unprotected, passwords stored in web browsers may be vulnerable to malware and theft by unwanted applications. Browser Defense allows you to choose which apps have access to your saved passwords. It also blocks access to browser cookies to protect your personal and sensitive data.

The following browsers are supported:

• Google Chrome
• Mozilla Firefox
• Microsoft Edge
• AVG Secure Browser

Note that Browser Defense is available for Windows workstations only.

How Browser Defense Works

Browser Defense functions by monitoring the files on the disk where the browser passwords are stored.

Google Chrome

The stored passwords are in chrome://settings/passwords (Settings > Autofill and passwords > Google Password Manager).

Data is stored and protected in %LocalAppData%\Google\Chrome\User Data\Default\Login Data.

Mozilla Firefox

In Firefox, the logins are in about:logins (Menu > Passwords).

Data is stored and protected in %AppData%\Mozilla\Firefox\Profiles\*\key4.db / logins.json.

Microsoft Edge

In Edge, the passwords are in edge://settings/passwords (Settings > Profiles > Passwords).

Data is stored and protected in %LocalAppData%\Microsoft\Edge\User Data\Default\Login Data.

AVG Secure Browser

The stored passwords are in secure://settings/passwords (Settings > Autofill > Password Manager).

Data is stored and protected in %LocalAppData%\AVG\Browser\User Data\Default\Login Data.

Enabling/Disabling Browser Defense

Browser Defense can be accessed from the Hacker Attacks section of the client UI, where you can see its status (enabled/disabled) and change it if needed using the toggle.

Configuring Browser Defense Settings

Advanced Browser Defense settings can be accessed by either clicking the gear icon on the Hacker Attacks screen or navigating to Menu > Settings > Full Protection > Browser Defense.

Here, you can again see the component status as well as supported browsers and their statuses. Furthermore, you can enable/disable protection of browser-stored passwords and/or cookies.

You can also select here whether Browser Defense will silently block any unknown applications trying to access your passwords or ask you what to do. If you choose Ask me to allow or block it, a dialog warning you of the possible threat will pop up each time such attempt is detected.

Selecting See details here will display the application name, browser, and data being accessed.

You can then decide whether to block or allow the app. If you select to block it (recommended), the dialog will confirm the application is blocked.

Then, the application will also be added to the blocked apps list.

The app will also be temporarily blocked if you take no action during the 30-second timeout. The tooltip will provide more information.

If you select to allow the application (not recommended), the dialog will confirm the application is allowed.

Then, the application will also be added to the allowed apps list.

The View allowed / blocked apps link at the bottom of the advanced settings screen provides a quick way to access the Blocked & Allowed apps list (see section below).

Blocked & Allowed Apps

If the device is managed by the Cloud Console, the rules set here can be overridden by policy settings. For more information, see Browser Defense.

As previously mentioned, clicking the View allowed / blocked apps link at the bottom of the settings screen will bring you to the Menu > Settings > General > Blocked & Allowed apps section of the client UI, used exclusively by Browser Defense.

Here, you can configure individually each application that will be blocked/allowed by Browser Defense

Clicking Block App or Allow App will open a dialog where you can either choose an active application directly from the list or click Select app manually to navigate elsewhere on the disk.

Once you select an app, ensure Browser Defense in the next dialog is selected, then click Add.

On the Blocked & Allowed Apps list, you will see the added applications and which components they apply to. You can edit or remove any listed app via its actions menu (three dots).

FAQ