Deploy Browser Plugin for DNS based protection

Deployment steps for various Mobile Device Management (MDM) tools. Contact SecureCircle support for guidance with additional tools not listed here.

Install the SecureCircle Browser extension for Chrome

Intune

1. Create a Device Configuration profile
2. Ingest the Chrome ADMX file into Intune
3. Select Platform: Windows 10 and later Profile: Custom
4. Name: SecureCircle Browser Plugin
5. Configuration settings:

• OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Chrome~Policy~googlechrome~Extensions/ExtensionInstallForcelist
• Data type: String
• Value:

<enabled/> <data id="ExtensionInstallForcelistDesc" value="1&#xF000;bijejlohjgnkgkiapabnkcgichfijgpd;https://clients2.google.com/service/update2/crx"/>

JAMF

1. Create configuration profile
2. Select “Application & Custom Settings”
3. Select “Upload File (PLIST file)”
4. Preference Domain: com.google.Chrome
5. Select and upload the plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//APPLE//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
	<dict>
		<key>ExtensionInstallForcelist</key>
		<array>
			<string>bijejlohjgnkgkiapabnkcgichfijgpd;https://clients2.google.com/service/update2/crx</string>
		</array>
		<key>ExtensionInstallAllowlist</key>
		<array>
			<string>bijejlohjgnkgkiapabnkcgichfijgpd</string>
		</array>
	</dict>
</plist>

6. Select Scope and assign to a machine or group of machines

SecureCircle Browser plugin Configuration

MacOS configuration

script example:

configFile="/Library/Application Support/SecureCircle/chrome_connector.json"

mkdir -p "/Library/Application Support/SecureCircle"

echo '[
    {
        "CUUID": "{REPLACE_WITH_CIRCLE_ID}",
        "Zones": {
            "Decrypt": [],
            "Encrypt": [
                ".*example\\\\.website\\\\.com.*",
                ".*example\\\\.s3.*",
                ".*pdf995\\\\.com.*",
            ],
            "Precedence": "Encrypt"
        }
    }
]' > $configFile

Windows Configuration

From Intune go to Devices → Scripts → Add

powershell example:

$configFile="chrome_connector.json"
$targetDir="C:\ProgramData\SecureCircle\"


if(!(Test-Path -Path $targetDir )){
    New-Item -ItemType directory -Path $targetDir
}

Set-Content -Path $targetDir$configFile -Value '[
    {
        "CUUID": "{REPLACE_WITH_CIRCLEID}",
        "Zones": {
            "Decrypt": [],
            "Encrypt": [
                ".*zoho\\.com.*",
                ".*pdf995\\.com.*",
                ".*file-examples\\.com.*",
            ],
            "Precedence": "Encrypt"
        }
    }
]'