Description

The Extension App is overhauled to improve navigation, provide more insight into the extension operations, and includes more features. We will go over the different sections below.

Procedure

The extension interface can be accessed in 2 ways:

1. Via the hamburger menu in the popup with the "Open app" menu option
2. By clicking on any of the charts in the status tab within the popup

The other settings in the hamburger menu consist of:
- Light/Dark mode: Toggles and displays the current display mode.

- Sync: Reconciles any changes between the backend and the extension e.g. a policy change.

- Logout: If signed in with an email address, this will log the user out. (This is disabled for any device-based deployments using the MSI)
Note: If a user logs out and the extension is still installed, they will be prompted to login only on the first opened tab per browser.

The App has 3 sections:

1. Dashboard - This gives you insight into metrics that ConcealBrowse has collected for your registered device:
   - Threats Detected: Gives overview of threats detected over time with 60 day trailing graph, Timestamp, Age, URL for each threat. Items and Page pulldowns aid navigation.
   - Isolation: Gives overview of isolations over time with 60 day trailing graph, Timestamp, Age, URL for each isolation. Items and Page pulldowns aid navigation.
   - Blocks by Policy: Gives overview of Access Policy blocks with 60 day trailing graph, Timestamp, Age URL for each block. Items and Page pulldowns aid navigation.
   - Scanned URLs: Gives overview of all URLs scanned with 60 day trailing graph, Timestamp, Age, URL for each scan. Items and Page pulldowns aid navigation. Note: full browsing history included in Scanned URLs is only viewable locally through the App and is not shared with administrators in the ConcealBrowse console.
2. Feedback - You can view any submitted requests on the Requests tab on the left hand menu. You can edit or delete these requests on the far right. Status shows current status of the request in the ConcealBrowse administration console. Directive means the treatment of the URL requested in the Feedback submission. If your administrator deletes the requests in the ConcealBrowse dashboard, it will be removed here as well.
3. System - Within the system settings there are:
   - Extension Log - This view contains the detection logs in context. This is useful for tracking the chain of events for a particular URL and for troubleshooting.
   - Extension Configuration - You can view most of the extensions configuration here. This is helpful primarily for troubleshooting. You can also download the configuration using the button in the top right corner and send to us if you are having problems.
   - These are the tabs that you currently have open. If you want to see details about what is currently loaded in that tab, just click on the row you are interested in. This is not a history. Once you close a tab the record will be removed. If we intervened, and depending on where in the loading process this occurred, the details will be incomplete because loading was stopped.

Going back to the main extension app, you will see 4 different tabs at the bottom:

1. This Website - Gives the decision upon analyzing the site/ or based on threat intel such as Allowed by Policy, This site is suspicious, Blocked by policy, Allowed.
   Site Info: Shows the site info like Origin, Domain, Subdomain, pathname etc.
2. Status Graphs -
   - Threats Detected: Shows number of threats detected year-to-date and current day. Clicking on bar graph opens the Threats Detected detail page in the extension App.
   - Isolated Sessions: Shows the number of sessions that were placed in isolation due to Conceal detecting threats on the site for both year-to-date and today. Clicking on bar graph opens Isolation detail page in extension App.
   - Policy Block: Shows the number of sites that were blocked by Access Policy for year-to-date and today. Clicking on bar graph opens the Blocks by Policy detail page in the extension App.
   - URLs Scanned: Shows the number of URLs that were scanned by ConcealBrowse for year-to-date and today. Clicking bar graph opens the Scanned URLs detail page in extension App.
3. Settings - - Disable extension on trusted sites: When enabled with a corresponding Allow Policy in place in the dashboard, ConcealBrowse will not scan the page at all. If this page would normally go into isolation or be blocked, it will now be allowed if there is a policy rule set with the directive "allow".  
   - Go Directly into Isolation: When enabled, a user entering isolation will not see the interstitial page that provides them with the option to return to the previous page or continue. Instead, they will see a brief loading screen and be taken directly to isolation. When this is turned Off, the end-user will see the interstitial page.
   - Auto-Display Site Information: When going into isolation, there is a pop up in the bottom left corner giving the user insight as to why the site went into isolation. Disabling Auto-display site information removes these details to be automatically displayed but users will still have the option to view them by clicking the Conceal icon. Customer can choose whether to get detailed information regarding their isolated session.
   - Enable Advanced Menu Options: This setting enables or disables a hamburger menu in our summary information modal when going into isolation. Customer can choose whether to get detailed information regarding the isolated session.
   - Include URLs in local log entries: This setting determines whether or not to include the URL that Conceal detected in the logs within the extension APP. When turned off it will replace the URL with <Redacted>.  Customer can choose whether to get detailed information regarding the isolated session.
   Note: Regardless of this setting, Browsing logs are not shared with the administrator or with Conceal employees. They only exist on the device that is running the extension. Redacting local log entries only provides more privacy in the event of local access to the machine.
   - Enable Experimental Features: These are features that are functional but still being improved. They will increase the sensitive of detection and could cause increased false positives.
4. Help -
   - Name: ConcealBrowse - this is the name used for ConcealBrowse extension in the browser marketplace.
   - Description: This is the description used for ConcealBrowse extension in the browser marketplace
   - Version: This is the version of ConcealBrowse extension currently installed
   - ID: This is a unique identifier for ConcealBrowse extension in the applicable browser web store and is unique to the browser in use.
   - CompanyID: The tenant ID required to register the extension to the corresponding ConcealBrowse tenant. Company ID will be unique for each main tenant and subtenant and can be found on the Download Extension or Register Device pages in the ConcealBrowse console. Company ID is primarily used for troubleshooting device registration or checkin issues.
   - DeviceID: Device Profile ID of the ConcealBrowse extension. Each browser profile will have a unique Device Profile ID. Administrators can view the corresponding Device Profile in the ConcealBrowse console under Devices>Device Profiles. So it will be different for edge/ chrome/brave etc.
   - UserID (user based only): UserID is displayed for User based deployments where the user has logged into the extension. This parameter is replaced with SiteID for device based deployments which do not require a user to login to the extension.
   - ID: extension store ID in google web store. It's different for every browser web store

Bottom Status Bar

- Protection is Active - This means that the extension is operating properly and providing protection.

- Monitor only mode - Interventions are disabled. This means that the extension is currently disabled and not providing protection. The Extension can be disabled and enabled in the ConcealBrowse console under Devices (device based deployments) or Users (user based deployments).

- Reduced Functionality - This means that there is a problem with the extension that is preventing it to checkin with the ConcealBrowser servers. Please contact support@conceal.io for assistance.

- Checkin (radio tower icon)- This indicates how long ago the extension last checked in with the ConcealBrowse service. Attempting a manual Sync under the popup hamburger menu should update the timeframe. If there is a significant amount of time (i.e. more than several minutes) since last checkin and a manual Sync does not update this timeframe, then there may be a problem with the ConcealBrowse extension - contact support@conceal.io for assistance.

*Never hesitate to contact your Customer Success Manager for any questions or concerns. You may also open a support ticket at support.conceal.io by scrolling to the bottom and clicking Submit a request.