I'm managing a small to medium-sized business with about 150-200 remote users and no physical infrastructure—just a typical startup tech stack like Slack, Gsuite, and Okta. We're currently leaning heavily on antivirus for endpoint protection, which feels a bit underwhelming. With the rise of AI, we want to enforce the use of Gemini, a specific large language model, and apply data loss prevention (DLP) policies to it. However, to enforce those policies, we need Chrome Enterprise, which only applies to Chrome itself. Since we have a variety of browsers in use, including some that allow unrestricted access to Gemini, we're concerned about the lack of control over our data. We've considered some context-aware rules to limit Gemini access on Chrome, but that doesn't fix the problem of other browsers accessing it freely. We're now seeking a technical solution rather than just relying on policy changes. My question is: how can we effectively block traffic to Gemini on any browser other than Chrome, or should we just be upfront with leadership about the costs of better security measures?
5 Answers
Honestly, it sounds like it’s time for your business to take a serious look at scaling up your security. With 200 users, running without a solid SASE or VPN is a big risk. Compliance frameworks are moving fast; an investment in a proper security tool should be part of your growth strategy.
You might want to look into DNSFilter. They offer a free trial, so you can see if it works for your needs. It sounds like a good fit since they also provide visibility into what users might be accessing that they shouldn't. Might just give you the control you need.
Wait, are you saying you’re fully remote without any SASE or VPN? That sounds risky, relying solely on antivirus. Are your employees using company devices at least? It’s crucial to have some remote management in place, like group policies or similar controls. What's your current setup for end-user devices?
Have you considered using zScaler? It’s not cheap, but in the security world, you often get what you pay for. Sometimes investing in a robust solution now can save a lot of trouble down the line.
You might want to check out LayerX. It could offer the kind of granular controls you’re looking for. It’s worth investigating to see if it matches your security needs.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures