Application and Change Control disables Web Control

Technical Articles ID: KB90374
Last Modified: 2022-11-23 10:23:15 Etc/GMT

Environment

Application and Change Control (ACC) 8.1.0.118.1 and later
Endpoint Security (ENS) Web Control 10.x

Problem

If you install ENS Web Control 10.x on a system with ACC 8.1.0.118.1 or later, the Google Chrome Endpoint Security Web Control Extension is disabled. The extension is grayed out, indicating that it's disabled. No sites are blocked and no ratings are shown.

Cause

In ACC 8.1.0.118.1 and later, a feature named Rules Engine is enabled by default. This feature is disabled by default in earlier versions of ACC. With this feature enabled, a rule-engine rule is needed to allow chrome.exe.

Solution

To prevent the issue from occurring, add the following rule-engine rule before you install ENS Web Control 10.x:

sadmin ruleengine add allow cmd.exe parent_process_name equals chrome.exe and command_line matches ".*mcchhost.*"

Workaround

If you've already installed ENS Web Control 10.x and have experienced the issue, do the following to resolve the issue:

Add the following rule-engine rule:

sadmin ruleengine add allow cmd.exe parent_process_name equals chrome.exe and command_line matches ".*mcchhost.*"
Remove the existing Google Chrome ENS Web Control Extension.
Go to the Google Chrome Web Store and then install the Google Chrome ENS Web Control Extension.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Application and Change Control disables Web Control

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Application and Change Control disables Web Control

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title