In the light of recent repeated critical Flash vulnerabilities there are recommendations to use browser plugins like click-to-play to prevent unnecessary Flash content from automatically loading with every Webpage.
I think this is a good idea however there is the matter of distribution and maintaining such plugins as well as selecting a well maintained and trusted one in the first place (for IE, Firefox, Chrome at least). I don't want to introduce another vulnerable surface into the environment.
So the question is:
- Do you have experience using such Plugins in an enterprise environment with lots of Windows clients? (lets say 100+)
- How do you deploy the plugin?
- How do you maintain the plugin? (regular updates)
- How do you centrally manage the configuration of this plugins? (GPOs?)
I'm interested in the enterprise feasibility and your experience with click-to-play'ish browser plugins in the enterprise.