[gptalk] Re: how to block removable USB storage devices
- From: "Tim Bolton" <jsclmedave@xxxxxxxxx>
- To: gptalk@xxxxxxxxxxxxx
- Date: Tue, 17 Oct 2006 06:31:15 -0500
Yes! It will recognize any product that you are using, Pen Tablets,
USB Keyboard, USB Printers etc... You can add your Specific Devices
as well, if its not listed.
So say you have a user that needs a USB stick, you scan that stick and
gets its specific HASH value. Now that user can use ONLY that stick
on the PC (or PCs) that you authorize.
I do not work for them, but I really liked the product at my last job
- I have recently relocated to another state - to the point I still
recommend their product.
Here are some contacts that I would recommend if interested.
Bryan.Grimes@xxxxxxxxxxxxxx ~ Very Good Tech Support!
Ken.Wilson@xxxxxxxxxxxxxx
Dirk.Vael@xxxxxxxxxxxxxx
What brought this all about is their product Application Control which
locks down ALL EXEs, DLLs, CPLs, etc etc... Until their HASH values,
and Binary values, are documented and allowed. So basically its a
White List of allowed Apps. If they are not on the list they will not
run, period... No more worrying about Virus or Trojan attacks. Very
easy to implement and maintain.
Tim Bolton
On 10/17/06, Ananth Rajagopal <ananth.rg@xxxxxxxxx> wrote:
Hi Tim,
Thanks for writing...
We have this Pen tablet device in all the systems, around 50 systems, so
obviously we need to keep the USB ports open, but removable storage access
via USB port needs to be blocked, is it possible...
I'll check out the link you posted...
regards
Anth
On 10/17/06, Tim Bolton <jsclmedave@xxxxxxxxx > wrote:
>
> I have two options that I would recommend.
>
> 1) Secure Wave's Device Control. I highly recommend this product!!
>
>
http://www.securewave.com/sanctuary_usb_endpoint_security_software.jsp
>
> - With this product you can
>
> Lock down all USBs except for a single PC, for a specific User on that
> PC, or for all the previous AND a specific USB device that you
> specify. Meaning that you scan their USB stick and ONLY that stick
> will work on THAT PC, and ONLY for THAT User.
>
> You can also monitor what they download and cache those documents for
auditing.
>
> You can control CDs, CD-ROM drives, Printers etc etc. Its is
> extremely granular and very powerful. Maintenance is a breeze.
>
> 2) Winternals is said to have some similar solutions, but I have not
> had the time to test. However, I value the judgment of the people
> that suggested it so I feel its worth a look.
>
> I worked with Device Lock, but I did not have the granularity that I
> needed or the over all options.
>
> Tim Bolton
>
> On 10/17/06, Ananth Rajagopal < ananth.rg@xxxxxxxxx> wrote:
> > Hi,
> >
> > This is my first query, won't be the last for sure...
> >
> > I'm working in an Animation studio, we have a policy here of blocking
all
> > USB drives, along with FDD and CDD.
> >
> > But we are getting some Pen Tablets, and all are USB devices, so
obviously
> > we will need to allow enable USB ports, is there any way to block users
from
> > connecting their removable drives and copying data using Group Policies?
> >
> > Kindly advice..in detail :-)
> >
> > regards
> > anth
> ***********************
> You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
> ************************
>
***********************
You can unsubscribe from gptalk by sending email to
gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by
logging into the freelists.org Web interface. Archives for the list are
available at //www.freelists.org/archives/gptalk/
************************
Other related posts:
