WORKSPACE / POLICIES
Browser policies
Set the rules. Keep your team connected.
01 / DATA TRANSFER
Upload protection
Choose where file uploads and email attachments are restricted.
Used in selected sites mode. Includes subdomains.
Allowed in global and selected modes. Includes subdomains.
Coverage
Blocks common file pickers, file drag-and-drop, clipboard files, and file/binary requests. Gmail and Outlook have additional attachment endpoint rules. Custom upload protocols and generated or encoded content can bypass browser-level detection. Use endpoint DLP for stronger organization-wide controls.
Initial adapters: Gmail · Outlook Web / Live provider testing still required02 / WEB ACCESS
Blocked websites & URLs
A domain blocks it and its subdomains. A full URL blocks that URL prefix.
◎Your blocklist starts empty
Add your first domain or URL above, then save the policy.
03 / FLEET
Browser registrations
New installations register automatically and wait for your approval. Match the Device ID shown on the browser setup page, label the record, then approve or reject. Chrome and Edge appear separately.
Advanced: manual or managed enrollment
Enrollment created
Enter these values in the extension setup. The code is displayed only now.
| Device / profile | Browser | Connection status | Last sync | Applied policy | Access |
|---|
No devices enrolled yet.
Connection reflects recent extension contact, not policy enforcement. Disconnected after 45 seconds; no contact for 5 minutes is highlighted. Browser closed, PC offline, or extension disabled/removed can all cause missing contact. Use Reload or enable Auto refresh for updated status.
Revocation stops future sync; it leaves the last applied restrictions on that browser.
04 / BLOCK PAGE
Customize the restriction page
Paste HTML and inline CSS. Use {{domain}} and {{url}} for the blocked destination. Leave empty to use the default design.
HTML/CSS only: scripts, forms, external assets and network requests are disabled. Inline images can use data URLs. Maximum 32 KB.
Live preview
05 / POLICY DELIVERY
Synchronization
Between 0.5 and 1440 minutes. Save policy to apply. The separate command channel stays connected while browsers are running, so a forced sync does not wait for this interval. Offline devices receive requests when they reconnect.
Sync buttons send the latest saved policy. Save your edits first.
WINDOWS COMPUTERS
Desktop application controls
Install the Windows agent: it registers automatically and appears here for approval. Approve the computer to receive its apps and accounts, then assign per-app blocks. The standalone blocker remains available for computers without an agent.
Advanced: manual one-time enrollment
Download this one-time configuration. Install with the Windows agent package as administrator.
| Label | Computer | Connection status | Last check | App policy status | Actions |
|---|
No Windows agents created yet.
Connection reflects recent agent contact, not policy enforcement. Disconnected after 90 seconds; no contact for 5 minutes is highlighted. Use Reload or enable Auto refresh for updated status.
Unchecking an app removes this tool’s managed block at the next successful apply. Existing processes keep running. Offline or revoked agents retain the last applied Windows blocks.
Desktop app policy
Checked apps are blocked. Filtering retains hidden selections. All standard users is recalculated by the agent when local account membership changes. Installed-program records without a detected executable are shown for inventory only; listed presets can still block conventional portable copies.
06 / HISTORY
Administrator activity
DEVICE WEB ACCESS
Device website policy
DEVICE DATA TRANSFER
Device upload policy
ALERT DELIVERY
Notifications
Receive email and Telegram alerts for new software and browser extensions. The first inventory is a baseline; existing items do not trigger alerts. New Browser Control registrations also trigger an alert.
Extension inventory requires Browser Control 0.6.0 with the management permission, in each monitored Chrome/Edge profile. Software detection uses the Windows agent inventory and may not cover portable or unregistered applications. Detection continues while the dashboard is closed.
Detection and delivery history
Delivery retries up to five times. Network interruptions can cause duplicate messages. Auto refresh stays off by default; use Refresh history to check delivery.
| Detected | Event | Device | Added items | Delivery |
|---|
No alerts detected yet.