Guys quiet new to DLP, I want to block all windows mobile based phones that use activesync via USB&Bluetooth as activesync seems to bypass usb storage restrictions as it creates a NIC interface and allows a user to drag drop files from Windows Explorer Via Mobile PC Icon. Now I have already tried to Create a plug and play device definition with Bus type USB and Bluetooth and Device Class as Pocket PC Windows Activesync devices and Windows Portable devices etc but it just doesnt work. Any ideas or steps I could take to make this work. Thx guys.
! I'm curious to know what you found on this. In particular, I'd like to see a sample policy to block arbitrary file transfers to and from the workstation to an ActiveSync-connected Windows Mobile device while allowing network connectivity to a remote system.