Blocking Chrome Webstore on Cisco Cloud Web Security

[dangeriscoupe1]

Hi Guys, We have Web Security implemented on our network and we are pushing out google Chrome to people who are requesting it.  With that said, we'd like to block chrome webstore. Currently we have a "Blocked Category"  filter and putting "chrome.google.com" in the domains inbound filter doesn't seem to help block the website. What would be the best way of doing this?  Thanks in advance guys!

[Tom Foucha]

It appears at first glance that Chrome Webstore is using an https site

(https://chrome.google.com/webstore/category/apps). Are you decrypting HTTPS connections? If not that may be required in order to block the site.

[dangeriscoupe1]

Thanks for replying Tommy.  No, I'm not decrypting the site.  How does one do that in the application? Thanks!

[Tom Foucha]

The online help has a guide on decryption but in a nutshell you create a CA certificate on the WSA and enable the HTTPS decryption engine and redirect port 443 to the WSA. You tell the WSA to decrypt traffic going to the chrome webstore and then you drop the traffic after you decrypt it.