This feature is available to Google administrators with the Chrome Enterprise Security Services privilege and requires a Chrome Enterprise Premium subscription. Learn more about administrator privileges. To learn more about DLP integration with Chrome Enterprise Premium, go to Use Chrome Enterprise Premium to integrate DLP with Chrome.
As an administrator, you can use timeout deadlines to control how long your users have to wait for data loss prevention (DLP) and malware scans in Chrome browser. This helps maintain security without impacting user experience.
What if a content scan exceeds the timeout deadline?
Chrome Enterprise Premium tells Chrome browser to ALLOW, signalling to Chrome browser that the user’s action can proceed. Chrome Enterprise Premium servers continue to evaluate DLP rules and malware for the same end-user action in the background. If the background check finds a policy match or violation, the results are sent to the security investigation tool for you to review.
Considerations
- Inconsistent logs—Because the checks are done in the background, the logs in the security investigation tool might not always match what the user experienced. For example, a user might be allowed to upload a file, but the logs might later show that the file should have been blocked.
- Possible delays—Even with timeout deadlines, users might still experience occasional delays due to slow network speeds or server problems.
Set up a timeout deadline
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Apps > Additional Google Services.
Requires having the Service Settings administrator privilege.
- Click Chrome Enterprise Security Services.
- Click Deep scanning protection settings to open the settings page.
- Click Edit
do one of the following:
- For Evaluation time limit for file upload, download, print or ChromeOS file transfer action, enter a time limit in seconds (for example, 8.5).
This option specifies how long DLP and malware scans take for file uploading and downloading, printing, and transferring files. - For Evaluation time limit for bulk text (paste) action, enter a time limit in seconds (for example, 3.5).
This option specifies how long DLP scans take for text that's pasted.
- For Evaluation time limit for file upload, download, print or ChromeOS file transfer action, enter a time limit in seconds (for example, 8.5).
- Click Save.
The deadline you set applies to all existing and future rules that use Chrome Enterprise connectors, such as file uploads or downloads.