McAfee DLP – Generally disallow Bluetooth connections but make exceptions for specific devices

[gegrabb]

Dear McAfee community,

We recently received a request from our Cybersecurity department, to validate, if it is possible to use the McAfee Data Loss Prevention, running on a Windows client, to monitor and block, but in the same way allow (as an exception) only certain Bluetooth connections to specific devices. For example, on a Windows client where Bluetooth is generally enabled, the McAfee DLP should disallow any connection via BT, but allow only the connection to a specific scanner from type XY, for which an exception has been set up beforehand. The idea is to allow only connections, which has been approved by Cybersecurity.

We are already using McAfee DLP to block and allow certain mass-storage devices like external hard drives, usb-ethernet-sticks, etc. For each plugged in device, we receive a ticket with certain information (like the vendor and device id), where we can decide to whitelist those if necessary. It would be great if it is possible in a similar way for Bluetooth connections.

Maybe someone of you specialists came already across such a specification and can advise us, if McAfee DLP is capable of providing this functionality or not.

Thank you very much in advance!

Gerald