Technical Tip: Group Policy (GPO) Settings are required to avoid conflicts with the FortiDLP Agent

[Anthony_E]

Description	This article describes that Group Policy (GPO) Settings are required to avoid conflicts with the FortiDLP Agent.
Scope	FortiDLP.
Solution	On Windows, the FortiDLP Agent makes use of the Windows Registry to apply settings for the automatic installation of the following features, depending on the agent configuration settings that have been applied by the FortiDLP platform: Google Chrome browser extension. Edge browser extension. Brave browser extension. Vivaldi browser extension . Chromium browser extension. Firefox browser extension. Outlook plugin. additionally, settings may be applied to: Disable private/incognito browsing (default) on supported browsers. Change the DNS-over-HTTPs settings on supported browsers. Disable agent uninstallation via add/remove programs. Enforce a password entry on agent uninstallation. All of these settings can be controlled via the Agent Configuration page on the FortiDLP Web UI, for example: In some more complex deployments, this can cause conflicts with settings already being applied via Group Policy. For example, if a user already has a list of force-installed Chrome extensions via Group policy and does not include the FortiDLP browser extension, then each time a Group policy update is applied, this will delete the requirement for the FortiDLP extension to be present. This could result in a loss of browser activity events. The purpose of this article is to outline all of the settings the FortiDLP agent could be applying automatically, and where each setting should be incorporated into an existing Group Policy setting to avoid conflicts. Once incorporated into a GPO template, the Agent Configuration settings from the FortiDLP platform should be set to match the settings pushed via Group Policy. Browser Extension Installation: HKLM = HKEY_LOCAL_MACHINE hive Google chrome: gbojkjpincgojijodbnliimgeggnomai Edge: ngpldaehnklbpdkphcjafbhajnklkiki Firefox ExtensionSettings JSON object: {"browser-extension@jazznetworks.com":{"install_url":"https://firefoxextension.reveal.nextdlp.com/e528d90e863641e5afbd-firefox-latest.xpi","installation_mode":"force_installed"}} Disabling Incognito/Private browsing modes HKLM = HKEY_LOCAL_MACHINE hive Disable DNS-over-HTTPS HKLM = HKEY_LOCAL_MACHINE hive Install Email plugin (Outlook) HKLM = HKEY_LOCAL_MACHINE hive HKCU = HKEY_CURRENT_USER /HKEY_USERS hive file:///C:\Program Files\Jazz Networks\Agent\Outlook\RevealOutlook.vsto|vstolocal