Block browser extensions on a CheckPoint firewall

[SubZer0]

A while ago, I was thinking about how to block browser extensions on a CheckPoint firewall. Today's news, "16 Chrome Extensions Hacked in Large-Scale Credential Theft Scheme," reminded me that controlling browser plugins can be an important security measure for organizations. Has anyone tried blocking browser extensions with CheckPoint? Any ideas or suggestions?

[Lesley · Accepted solution]

No there is no way on a firewall to do this.

Best approach is:

https://support.google.com/chrome/a/answer/9296680?hl=en

There are more ways like inTune / GPO etc. But from firewall point of view I am not aware of an option to do this. 

[the_rock]

Best way I can think of is to block QUIC protocol.

Andy

[PhoneBoy]

You can probably block chromewebstore.google.com with the firewall, though it may require HTTPS Inspection to be enabled.
The real solution is to implement this via GPO/MDM or via Google Enterprise.