Clients Section

The Clients section of the navigation bar provides access to detailed client data for the PCs connected to your Proton server. The five sub-pages provide client connectivity and inventory information for Status, Java and ActiveX.

Status

The Status page will display all Proton clients that are, or have, connected to the server.

You can narrow the list of clients by typing search criteria into the search bar

To disable data collection from a specific client, check the box next to it in the list and click the ‘Disable’ button. This will prevent that client from uploading any data in the future. Note that existing data already uploaded by that client will remain and will not be removed or filtered. Client data upload can be re-enabled by selecting the appropriate clients and selecting ‘Enable’.

For a full report on a specific client, click it from the list to see a summary view of installed software, with access to additional information via the Java, ActiveX, Browser Extensions and Web Activity tabs. The following screenshot provides an example of a client running Windows 10 with a collection of browsers installed. This client has all the Browsium modules active and Browsium extensions enabled.

The Java tabs shows us the versions of Java installed on this client.

The ActiveX tabs shows the ActiveX controls installed on this client.

The CVE links enable quick access to the known list of published vulnerabilities for each component. Click the green CVE button to find out more on a specific control.

Browser Extensions offers a list of browser extensions installed for the given user.

The CVE links enable quick access to the known list of published vulnerabilities for each component. Click the green CVE button to find out more on a specific control.

Web Activity provides easy access to a filtered view of the web applications access by this client. Click the green link button to go directly to the Web Activity detail screen.

Java

The Java page displays a list of all Java versions installed on Proton clients throughout your organization. Proton collects information on the version installed, as well as detailing the default version of Java used for web applications and the version used for desktop applications.

Selecting any of the listed Java versions will provide a complete list of clients in the organization with that version in stalled.

The Java Desktop Defaults tab offers a listing of Java versions and the number of desktop clients which have that one set as default.

Selecting any of the Java versions listed on this tab brings up the list of clients with that Java version set as the default.

The Jave Web Defaults tab gives a listing of Java versions and the number of clients set to use that version as the default for web applications.

Selecting any of the Java versions listed on this tab brings up the list of clients with that Java version set as the default.

ActiveX

The ActiveX page displays a list of all ActiveX controls installed on Proton clients across your entire organization.

The table lists all installed ActiveX controls and version information for clients throughout the enterprise as well as a list of how many clients have that particular ActiveX control installed and enabled. In addition, Proton collects and reports on ActiveX control security data, as well as related usage/activity data for each client.

Click on any ActiveX control in the table for the list of clients that have that control installed.

Extension Inventory

The Extension Inventory page displays a list of all extensions installed on Proton clients across your entire organization. Extensions can be from any vendor store or side-loaded by users.

The table lists all browser extensions installed and version information, the browser with the extension installed, as well as a list of how many clients have that extension installed and enabled.

The Proton database collects and stores the extension ID, name and version from each client. Clicking on any extension in the table listing will display those clients (and users) with the extension installed:

The extension ID is not displayed in reporting but remains accessible in the database for reference if needed.

Organizations may find unfamiliar extensions installed in their environments, so the ‘CVE Report’ link provides a quick way to see any known or reported issues with a given extension.

Extension Updates

Extension Updates provides a full view of any changes to extensions from their previous version status. When an extension is updated (manually or using the auto-update mechanism) and the client data is reported to Proton, the system will perform a complete review of the new extension and manifest data. Proton will identify any changes in permissions and score the modifications based on the organization’s configuration criteria.

For more information on scoring values, see the Extension Analyzer Configuration section.

Clicking on an Extension brings up the detail record view:

The Change description field offers a quick narrative style overview of the differences Proton determined between versions. This detailed view provides a side-by-side analysis of the changes between versions, providing a detailed list of changes inf Permissions Risk Score and Risk Score Breakdown.

Clicking the ‘Compare’ button brings up window with a Diff view of the two manifest documents for direct analysis.

Extension Analyzer

To enable an organization to get detailed information on extensions prior to

Proton provides the ability to upload an extension and get an instantaneous review and Risk Analysis score.

To upload an extension for review, simply select the browser platform and ‘Choose File’ to find the extension zip file. Once the file is selected, click ‘Analyze’. Proton will then analyze the selected extension and provide a summary view:

The report includes information on the Extension Name, Description and Version as provided by the developer, so it is possible the name is misleading or the description field is blank. The Permissions and Risk Score data are confirmed by Proton so they will always be accurate.

In addition to the Risk Score value calculation, Proton includes an organizational specific weight analysis for each Extension. The color coding of the Risk Score (Red/Amber/Green) will indicate if the submission is within range or an outlier compared to other extensions used in your organization.

Registration

This section is for Browsium Client Management Server (BCMS) usage and not directly related to Proton. Please see the Browsium Client Management Server Administration Guide for more information on these items.