cancel
Showing results for 
Search instead for 
Did you mean: 
jshi
Level 7
Report Inappropriate Content
Message 1 of 6

How do block USB drives on EPO 5.1.0 Build 509?

I'm running EPO version 5.1.0 Build 509. I want to be able to manage usb drives on the network. Only have certain usb drives active while still allowing for usb devices like keyboards and mice to still function. Thanks for the help in advance!

5 Replies
exbrit
Level 21
Report Inappropriate Content
Message 2 of 6

Re: How do block USB drives on EPO 5.1.0 Build 509?

Moved to ePO for faster support.

---

Peter

Moderator

Re: How do block USB drives on EPO 5.1.0 Build 509?

You'll need to use the DCM portion of the DLP module. Within that policy, you can setup to block USB's and whatnot.

If you don't have the DLP module, you will need to download and install the DLP extension as well as check in the DLP agent into the master repository, then deploy it out to each windows machine you want to manage USB's.

jshi
Level 7
Report Inappropriate Content
Message 4 of 6

Re: How do block USB drives on EPO 5.1.0 Build 509?

Is there any kind of documentation on how to do this?

Re: How do block USB drives on EPO 5.1.0 Build 509?

'DLP' is a product suite. Focus is on Data.

Device Control is a more focused endpoint product. Focus is on Devices.

http://www.mcafee.com/us/products/dlp-endpoint.aspx   McAfee DLP Endpoint

http://www.mcafee.com/us/products/dlp-discover.aspx   McAfee DLP Discover

http://www.mcafee.com/us/products/dlp-manager.aspx   McAfee DLP Manager

http://www.mcafee.com/us/products/dlp-monitor.aspx     McAfee DLP Monitor

http://www.mcafee.com/us/products/dlp-prevent.aspx    McAfee DLP Prevent

These are good at managing Data which you define as sensitive that needs control leaving the premises via many means, but not specifically/exclusively USB. You have choices as to which pieces of the DLP suite are needed or desired in your environment

Or,

http://www.mcafee.com/us/products/device-control.aspx   McAfee Device Control

which is better at handling USB port issues (as well as CD/DVD, MP3, COM/LPT ports, etc.) but not as good at controlling sensitive data.

Which is your intended goal:

1) Strict control of all USB ports for external drives? (Device Control)

2) Strict control of sensitive data, but allowing external USB drives for less sensitive information? (DLP)

http://www.mcafee.com/us/apps/products-az.aspx   Products A-Z

is a good source for exploring more options.

Post back with questions.

Ron Metzger

Re: How do block USB drives on EPO 5.1.0 Build 509?

You may want to consider the McAfee Device Control product ( http://www.mcafee.com/us/products/device-control.aspx ) as a means of controlling USB devices.

"McAfee Device Control protects your data from falling into the wrong hands via removable storage devices and media, such as USB drives, MP3 players, CDs, and DVDs. It enables you to specify and categorize which devices may or may not be used and enforce what data can and cannot be transferred to these devices — in the office, at home, or on the move. Device Control provides content- and context-aware, device-blocking capabilities . . ."

It is centrally controlled by ePO via an extension in ePO.

Hope this helps.

Ron Metzger