Web Security Service

help Help pdfs
English

Protect Chromebooks

If your organization manages Chromebooks and other devices on the Google Approved Chrome Devices list, you can use the Google Admin Console to deploy the necessary
Web Security Service
 proxy settings to each of your devices.
In addition to making it easier to secure web traffic from Chromebooks, the chrome plug-in also helps with authentication. Typical authenticated browser access requires authentication prompts before a user is authenticated and permitted to reach the Internet. After a user successfully authenticates, the
WSS
 Chrome plug-in retains the auth token and adds it to each subsequent outbound request in an X-header. This eliminates the need for authentication redirects and prevents web pages from breaking due to issues authenticating inline content, or because browser security technologies like Cross-Origin Resource Sharing (CORS).
Before you begin, ensure that Roaming Captive Portal is enabled in your
WSS
 portal (
Identity > Auth Connector
).
Step 1—Publish the Plugin in the Google Admin Console
  1. Save the Plugin Zip archive to your local system. Right-click the following link:
  2. Log in to your Google Admin Console and publish the plugin, as detailed in the following article:
  3. Install the plugin to your organization's Chrome devices from the Google Admin Console, as detailed in the following article:
Step 2—Install the
WSS
 Root CA certificate on Chrome Devices
If the zip you downloaded contains the SSL certificate, proceed to sub-step 2.
  1. Log in to the
    WSS
     portal.
    1. Navigate to
      Policy > TLS/SSL Interception
      .
    2. Expand the
      TLS/SSL Interception Certificate
       area.
    3. Click
      Download
      to save the
      WSS
       Root CA certificate to your local system.
  2. Install the certificate on your Chrome devices and set it as a trusted HTTPS certificate authority. This article details the process.
Step 3—Push Proxy Settings to your Chrome Devices
Refer to the steps under
Network > Proxy
 mode in this Google Admin Console Solution Article. Define the location of the Proxy PAC file as follows:
  • https://portal.threatpulse.com/roaming
Symantec
 performed all testing for this plugin on Chromebook devices. However this plugin is also compatible with Chrome browsers on other desktops as well.