DNS & Web Filtering Q&A

1. DefensX extension is blocking a site even though it is set to allow and there is a custom URL group allowing access.

Some websites can create false positives with ad blocker rules. For this reason, every Adblocker has a feature to bypass for a website.

It is possible to left-click on the DefensX extension icon, disable the Adblocker (image 1), and click the refresh icon on that page (image 2)

Adblocker blocking webpage

2. What is the extension id values used in DefensX?

DefensX browser extensions have different Extension ID values depending on the browser and whether the computer is in a managed or unmanaged state. Below is a detailed breakdown of how extension updates work based on the system’s management status.

Chromium-Based Browsers (Google Chrome, Microsoft Edge, Brave, etc.):

Chromium-based browsers enforce the following update rules:

  • Unmanaged Computers → Extensions can be updated directly from the public marketplace (Chrome Web Store or Edge Add-ons Store).

  • Managed Computers → Extensions can also be updated from third-party CDNs that implement the Chromium extension update APIs.

How Managed Status is Determined:

  • Windows: The computer is considered managed if it is joined to an Active Directory domain or enrolled in Azure AD (must be in device-join state, not workplace-join).

  • Mac: The system is considered managed if it is enrolled in an MDM solution.

Mozilla Firefox:

Unlike Chromium-based browsers, Firefox does not differentiate between managed and unmanaged computers.

Therefore, DefensX always distributes its Firefox extension updates via its own CDN instead of a public marketplace.

DefensX Extension ID List

Browser

Mode

Extension ID

Microsoft Edge

Managed

fdomlklchjcnkhdhokbjnjkholdpcigf

Microsoft Edge

Unmanaged

hmomekkanlpolfcioahahejdkkngmmbo

Google Chrome & Other Chromium-Based Browsers

Managed

igcdehhadkimeknpcllehcmdniepaamp

Google Chrome & Other Chromium-Based Browsers

Unmanaged

kdgfdpfnfmmedmkakcfckhblalhincph

Mozilla Firefox

All Cases

[email protected]

GPO Configuration for Extension Whitelisting

If you are enforcing a browser extension whitelist policy via Group Policy (GPO), it is recommended to allow both managed and unmanaged extension IDs to ensure seamless updates and compatibility.