Application Blocking for Mac - Block Unsupported Browsers
Block browsers that cannot be properly locked down on a Mac. Now in early access.
We've recently launched application blocking for Mac, initially focused on blocking browsers that cannot be properly locked down.
This is an opt-in only beta, available to anyone who wants early access (details further down the page).
In short, this can be used to narrow down the allowed browser applications on a Mac and completely block unsupported browsers from being opened.
Here are a few key benefits:
- Block browser apps that have built-in VPNs, proxies, or other privacy features that circumvent content filtering.
- Only allow the use of approved browsers, which can be properly locked down.
Customizing Restrictions on Supported Browsers on Mac
You can currently use the Tech Lockdown Config Editor to lock down supported browsers on a Mac to restrict features that can be used to bypass content filtering.
For example, you can restrict the use of browser plugins to what you approve:
You can also customize the supported browsers to remove features like built-in VPNs, AI features, private browsing, ability to delete browser history, and lock the DNS settings to your content filter:
Some browsers, like Chrome and Brave, have their own built-in adult content filter, SafeSearch settings, and YouTube restricted mode settings that can be locked on - which is an additional layer alongside your DNS Content Policy :
But here's the challenge: customization is only possible on a short list of supported browsers (Safari, Chrome, Brave, Edge, Firefox):
Browser customizations might be bypassed if the user downloads an unsupported browser.
The admin can workaround this by switching the Mac user account to a limited user and then turning on "Allow only approved apps":
But with the new early access application blocking feature for Mac, we've added in an additional layer of protection through unsupported browser blocking.
Preventing Unsupported Browsers from being Opened
If you've opted into both the Remote Supervision beta and the new Application Blocking for Mac beta, you'll see the option to "Block other browsers" in the Mac config editor:
Once configured, the Mac associated with this config will install an endpoint security plugin ( Santa ) and Tech Lockdown will sync a large list of restricted browsers to the Santa extension.
If an unsupported browser is attempted to be opened, a block message like the following will display:
We still recommend setting up a limited Mac user account (not admin), especially if it's a child's Mac that you are supervising.