Enable Web Control and configure its options on a client system

Hide the Web Control toolbar on the browser without disabling protection.

Select Hide the toolbar on the client browser.

Allow users to run Internet Explorer with the -extoff command-line option.

Select Allow user to run Internet Explorer in extension-off mode.

Caution

In extension-off mode, Internet Explorer doesn't load any extensions or add-ons. Although Web Control is enabled on the system, it isn't loaded in the browser, which leaves the system vulnerable to threats.

Track browser events.

Configure settings in the Event Logging section.

Block or warn unknown URLs.

In Action Enforcement, select the action (Block, Allow, or Warn) for sites not yet verified by Trellix GTI.

Scan files before downloading.

In Action Enforcement, select Enable file scanning for file downloads, then select the Trellix GTI risk level to block.

If users specify the complete URL to a file whose reputation is not malicious, Web Control allows the file download, even if the site is blocked.

Download clean reputation files (Green rated) from unverified URLs.

In Action Enforcement, select Block and Allow Green-rated file downloads from not yet verified URL.

This feature is only available for Google Chrome.

Note

To view this option, Enable file scanning for file downloads must first be selected.

Add external sites to the local private network.

In Exclusions, under Specify IP addresses or ranges to exclude from Web Control rating or blocking, click Add, then enter an external IP address or range.

Block risky sites from appearing in search results.

In Secure Search, select Enable Secure Search, select the search engine, then specify whether to block links to risky sites.

Secure Search automatically filters the malicious sites in the search result based on their safety rating. Web Control uses Yahoo as the default search engine and supports Secure Search on Internet Explorer only.

If you change the default search engine, restart the browser for the changes to take effect.

The next time the user opens Internet Explorer, Web Control displays a pop-up prompting the user to change to Trellix Secure Search with the specified search engine. For Internet Explorer versions where the search engine is locked, the Secure Search pop-up doesn't appear.