cancel
Showing results for 
Search instead for 
Did you mean: 
Moniker
Level 7

CD/DVD drive device control rule issues depending on burning software

Hi,

Just wondering if other have experienced this same issue and is it to be expected.

I've configured a Removable storage device rule (not any of the protection rule types) to allow Read-Only access to the CD/DVD burner.  The experience blocking the writing of data to a blank disc seems to be hit or miss depending on the software used. If I use Nero or Imgburn the software complains about access and doesn't load up the dvd-drive to burn. However, cdburnerXP software does allow a blank disc to be written to even though the rule should be blocking it.

I'm on the latest and greatest version of DLP 9.2.200.23 but still encountering this issue. Searching the forum I've found posts about problems with using the protection rules but that isn't what I'm using. I'm using the device control rule which according to other posts should work without a hitch.

As it stands I cannot rely on DLP to block writing out data to blank cd/dvd discs consistently.  Has anyone else noticed this problem?

0 Kudos
4 Replies
virgona
Level 9

Re: CD/DVD drive device control rule issues depending on burning software

Pls check if KB71165 can answer you.

-----------------------------------------------------------

Technical Articles

CD/DVD image creation software is unable to read drive parameters with Host Data Loss Prevention 9.x / 3.0

...

Message was edited by: virgona on 4/29/13 2:06:00 PM CST
0 Kudos
Moniker
Level 7

Re: CD/DVD drive device control rule issues depending on burning software

Hi,

Thanks but my issue is not with Nero or Imgburn not being able to access the dvd drive, that's actually a good thing since I'm attempting to prevent blank dvd/cds from being written to.

My issue is that by using the software cdburnerXP, you can proceed to burn a blank cd/dvd successfully even though McAfee DLP is supposed to be preventing it.

0 Kudos
virgona
Level 9

Re: CD/DVD drive device control rule issues depending on burning software

Did you register cdburnerXP in Application Definations?

I found DLP is able to detect and control softwares which are in Application Definations list. If you exclude one in the list, that does not mean all but the excluded one are in control, it means all in Application Definations list but the exculded one are in control. So all softwares you want DLP to detect and control should be registered in the list first.

0 Kudos
Moniker
Level 7

Re: CD/DVD drive device control rule issues depending on burning software

Just to close out my own thread.

Platinum support has advised the ability of CDburnerXP to successfully bypass the cd/dvd drive removable storage device rule, is an issue with the CDburnerXP software and not the McAfee DLP agent.

0 Kudos