How to disable the AutoComplete web browser feature that caches ePolicy Orchestrator authentication details
Last Modified: 2023-07-27 05:27:52 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
How to disable the AutoComplete web browser feature that caches ePolicy Orchestrator authentication details
Technical Articles ID:
KB91228
Last Modified: 2023-07-27 05:27:52 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10, 5.9.x, 5.3.x
Problem
Web browsers cache sensitive ePO console user logon credentials. Modern web browsers, by default, allow ePO users to save their logon credentials so that the credentials can be auto-completed the next time the user logs on. The default browser feature allows ePO sensitive information in the browser to be cached. Cause
All modern browsers have an integrated password management feature. When the user enters a username and password for a site, the browser offers to remember the username and password. When the user visits the site again, the browser auto-fills the logon fields with the stored values. This feature is on by default. This design is the latest standard design across all browsers and the previous method to turn off this feature with the autocomplete=off flag is no longer honored. For details of this design change, see this documentation. Solution
Because the previous solution (autocomplete=off) that ePO already implements is no longer honored by modern browsers, concerned users can disable the auto-fill feature. To configure the browser settings to prevent sensitive information from being cached, see the following instructions:
NOTE: The external links used in this document are for reference only. We make no guarantee of the article availability because they're external to Trellix. Affected ProductsLanguages:This article is available in the following languages: |
|