2

Our Company allows browsing without restriction such as news, fb, twitter, blogs etc.

Would it make sense to have employees install Adblock or similar plugins to prevent (accidentally) clicking malicious ads?

If not, what are common measures exist apart from standard employee awareness training.

5
  • Make sense to what company? In what industry? This is opinion-based. Jan 15, 2016 at 9:23
  • You don't seem to know why 'malicious ads' would cause compromises to your security? What about 'malicious' emails, and websites, and hardware, and applications? If you don't have a threat model there's no way we can discuss the policy that best addresses it. Jan 15, 2016 at 11:54
  • Depending upon the vulnerability being exploited, the employees don't actually have to click on anything. Flash exploits come to mind.
    – k1DBLITZ
    Jan 15, 2016 at 12:32
  • In this day in age, I would say yes, absolutely. And not only to have employees install an ad-blocker, but to make it a part of your standard configuration and push them out automatically.
    – Xander
    Jan 15, 2016 at 14:24
  • I personally ended up installing an ad blocker because of the "colorful" ads commonly displayed alongside the web comics I read with my morning coffee/tea. So there's other benefits as well. :-)
    – Ben
    Jan 15, 2016 at 15:23

1 Answer 1

3

Not needed but Its generally a good idea, malwaretising is quite common nowadays, plus most of users will probably appreciate the lack of ads. However, it may not prevent any infections at all if you have other things setup correctly (sandboxing, not using flash and java in browsers etc.)

But instead of forcing users to install them you can use stuff like Firefox ESR with CCK2(http://decentsecurity.com/enterprise/#/ublock-for-firefox-deployment/). Which would be a cleaner options.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .