WORKSPACE / POLICIES
Browser policies
Set the rules. Keep your team connected.
01 / DATA TRANSFER
Upload protection
Choose where file uploads and email attachments are restricted.
Used in selected sites mode. Includes subdomains.
Allowed in global and selected modes. Includes subdomains.
Blocks common file pickers, file drag-and-drop, clipboard files, and file/binary requests. Gmail and Outlook have additional attachment endpoint rules. Custom upload protocols and generated or encoded content can bypass browser-level detection. Use endpoint DLP for stronger organization-wide controls.
Initial adapters: Gmail · Outlook Web / Live provider testing still required02 / WEB ACCESS
Blocked websites & URLs
A domain blocks it and its subdomains. A full URL blocks that URL prefix.
Add your first domain or URL above, then save the policy.
03 / FLEET
Device enrollments
Create separate Chrome and Edge records for each computer. Managed setup survives browser profile resets; test codes expire after 24 hours and work once.
Enter these values in the extension setup. The code is displayed only now.
| Device / profile | Browser | Last sync | Applied policy | Access |
|---|
No devices enrolled yet.
Revocation stops future sync; it leaves the last applied restrictions on that browser.
04 / BLOCK PAGE
Customize the restriction page
Paste HTML and inline CSS. Use {{domain}} and {{url}} for the blocked destination. Leave empty to use the default design.
HTML/CSS only: scripts, forms, external assets and network requests are disabled. Inline images can use data URLs. Maximum 32 KB.
05 / POLICY DELIVERY
Synchronization
Between 0.5 and 1440 minutes. Save policy to apply. The separate command channel stays connected while browsers are running, so a forced sync does not wait for this interval. Offline devices receive requests when they reconnect.
Sync buttons send the latest saved policy. Save your edits first.
06 / HISTORY