[gptalk] Re: how to block removable USB storage devices

  • From: "Ananth Rajagopal" <ananth.rg@xxxxxxxxx>
  • To: gptalk@xxxxxxxxxxxxx
  • Date: Mon, 23 Oct 2006 11:39:11 +0530

Dear Tim,

I had send a request at their Web site for the download link, but so far
they have not replied.

Will let you know once I try out the software, if you know the price of the
software pls do tell me...

regards
Anth.

On 10/17/06, Tim Bolton <jsclmedave@xxxxxxxxx> wrote:

Yes! It will recognize any product that you are using, Pen Tablets, USB Keyboard, USB Printers etc... You can add your Specific Devices as well, if its not listed.

So say you have a user that needs a USB stick, you scan that stick and
gets its specific HASH value.  Now that user can use ONLY that stick
on the PC (or PCs) that you authorize.

I do not work for them, but I really liked the product at my last job
- I have recently relocated to another state - to the point I still
recommend their product.

Here are some contacts that I would recommend if interested.

Bryan.Grimes@xxxxxxxxxxxxxx ~ Very Good Tech Support!

Ken.Wilson@xxxxxxxxxxxxxx

Dirk.Vael@xxxxxxxxxxxxxx


What brought this all about is their product Application Control which locks down ALL EXEs, DLLs, CPLs, etc etc... Until their HASH values, and Binary values, are documented and allowed. So basically its a White List of allowed Apps. If they are not on the list they will not run, period... No more worrying about Virus or Trojan attacks. Very easy to implement and maintain.

Tim Bolton





On 10/17/06, Ananth Rajagopal <ananth.rg@xxxxxxxxx> wrote:
> Hi Tim,
>
> Thanks for writing...
>
> We have this Pen tablet device in all the systems, around 50 systems, so
> obviously we need to keep the USB ports open, but removable storage
access
> via USB port needs to be blocked, is it possible...
>
> I'll check out the link you posted...
>
> regards
> Anth
>
>
> On 10/17/06, Tim Bolton <jsclmedave@xxxxxxxxx > wrote:
> >
> > I have two options that I would recommend.
> >
> > 1) Secure Wave's Device Control.  I highly recommend this product!!
> >
> >
> http://www.securewave.com/sanctuary_usb_endpoint_security_software.jsp
> >
> > - With this product you can
> >
> > Lock down all USBs except for a single PC, for a specific User on that
> > PC, or for all the previous AND a specific USB device that you
> > specify.  Meaning that you scan their USB stick and ONLY that stick
> > will work on THAT PC, and ONLY for THAT User.
> >
> > You can also monitor what they download and cache those documents for
> auditing.
> >
> > You can control CDs, CD-ROM drives, Printers etc etc.  Its is
> > extremely granular and very powerful.  Maintenance is a breeze.
> >
> > 2) Winternals is said to have some similar solutions, but I have not
> > had the time to test.   However, I value the judgment of the people
> > that suggested it so I feel its worth a look.
> >
> > I worked with Device Lock, but I did not have the granularity that I
> > needed or the over all options.
> >
> > Tim Bolton
> >
> > On 10/17/06, Ananth Rajagopal < ananth.rg@xxxxxxxxx> wrote:
> > > Hi,
> > >
> > > This is my first query, won't be the last for sure...
> > >
> > > I'm working in an Animation studio, we have a policy here of
blocking
> all
> > > USB drives, along with FDD and CDD.
> > >
> > > But we are getting some Pen Tablets, and all are USB devices, so
> obviously
> > > we will need to allow enable USB ports, is there any way to block
users
> from
> > > connecting their removable drives and copying data using Group
Policies?
> > >
> > > Kindly advice..in detail :-)
> > >
> > > regards
> > > anth
> > ***********************
> > You can unsubscribe from gptalk by sending email to
> gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR
by
> logging into the freelists.org Web interface. Archives for the list are
> available at http://www.freelists.org/archives/gptalk/
> > ************************
> >
>
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at http://www.freelists.org/archives/gptalk/
************************

Other related posts: