cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to control different sd cards in digital cameras?

Hello, I'm looking for a solution to control different sd card types that are used with the same camera model.

We're using Data Loss Prevention Endpoint 9.3 with ePo 5.3 in our company and we're blocking all USB devices excepting encrypted USB-sticks and 2 digital camera models. For both we've created device definitions with VID and PID and are using them in device rules. It's all working fine, but we discovered a security problem with the digital cameras: Windows and DLP manages the cameras and the used SD card as one USB device. So you can change the sd cards like you want because the card isn't blocked or recognized as a card by DLP / Windows. In addition the sd card doesn't have a DLP managable property like PID or hardware class.

Does anyone of you have an idea or workaround for closing this backdoor?

Thank you in advance .

3 Replies

Re: How to control different sd cards in digital cameras?

Connecting the Digital Camera directly to the Computer usually mounts the device as a PTP or MTP/WPD device.

Some camera's will mount as Removable Storage (USB Drive).

Some cameras let the user choose what type of device to mount as (like modern android phones/tablets do).

To learn more about PTP, WPD, and MTP - a good wiki resource: Media Transfer Protocol - Wikipedia, the free encyclopedia

We define each type of device and apply restrictions to it.

PTP - Bus Type = "USB", Device Class = "Windows Portable Device", USB Class Code = "06h - image".

MTP -Bus Type = "USB", Device Class = "Windows Portable Device", Device Compatible ID starts with "USB\MS_COMP_MTP".

Removable Storage - File System Access = "Read-Write" (this seems to catch ALL Removable Media/Storage without needing to define Bus Types).

Re: How to control different sd cards in digital cameras?

Thanks for your reply. We are now working with removable storage file access rules.

Re: How to control different sd cards in digital cameras?

Did you control the SD Card by using the process above?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community