Forum Discussion
Web content filtering and indicator aren't working on third party browser
Hi Sathya_Sekar520, we have tested a number of custom indicators. Here are two harmless sites we used, both of which exhibited the same behaviors on multiple PCs:
lucenttechgroup.com
fark.com
http://www.lucenttechgroup.com
http://www.fark.com
https://lucenttechgroup.com
https://fark.com
https://www.lucenttechgroup.com
https://www.fark.com
All of these variations produce the same inconsistent results in Chrome. Edge works every single time.
It should be noted that Premiere Support did find that Microsoft's test URL: https://smartscreentestratings2.net/ is blocked in Chrome every time. Premiere Support has yet to come back with why that is.
Use MCAS (Microsoft Cloud App Security) - Validate the URL through MCAS.
Configure Microsoft Defender browser protection for Chrome and check.
Hi Sathya_Sekar520 - not sure if you saw my question but can you please expand on your suggestion? I have a Business Premium license so I'm not sure if what you mentioned is feasible. Thanks.
CharlieAD we have heard from Microsoft support that disabling Quic in chrome will resolve this as network protection for defender does not support quic protocol. Since testing with it disabled in chrome we have seen it working correctly so far. No word whether or not support for this is coming in the future for network protection.
I did the below to test but ended up pushing out in Intune for some of our staff devices to test further
To disable HTTP/3 (QUIC) in Google Chrome, please follow these steps:
Open Google Chrome.
In the address bar, type: chrome://flags#enable-quic
Locate the Experimental QUIC protocol flag.
Set the flag to Disabled.
Relaunch Chrome for the setting to take effect.- Hey there - was there any document or technical reason cited? We've been told by support to disable the QUIC protocol on our supported browsers (Edge and Chrome) but not why. I cannot find any reference for Network Protection / Web Threat Protection having a bad interaction with QUIC. Moreover, QUIC is supported and is natively enabled in Edge and Chrome so if this protocol wasn't, why would MS leave it in "default" state ?
Thanks a lot in advance!
- Microsoft suggested Configure Microsoft Defender browser protection for Chrome a while back. We have the Microsoft Defender Browser Protection Add on pushed to all devices with chrome so they cant remove/disable.
- Same here. A year ago, I thought maybe the Microsoft Defender browser protection for Chrome would help better remotely administer instances of Chrome across our PCs but I'm not clear if it has any benefit. Unfortunately, it has not helped this issue though.
Hi Sathya_Sekar520 - please be more specific, and if you can point to any documentation that supports your suggestion that would be great. I have a Business Premium license and the Cloud Apps section of Defender is limited so I'm not sure to what you're referring. Thanks.
