USB Block

Verbo
Verbo Posts: 1 Security Scout
in Elements Endpoint Protection (EPP)

Using EPP for client and has the device control, Does anyone know how to block the USB from any Data transfer,, done this for USB memory sticks. however, plug a removal hard drive in and can still access in full?

Answers

  • Sethu Laks
    Sethu Laks Staff, Moderator Posts: 300 W/ Moderator

    Hi @Verbo

    Thank you for reaching out to the WithSecure Community,

    It appears that while you've successfully blocked data transfer for USB memory sticks using WithSecure Elements EPP's Device Control, external hard drives remain accessible. This discrepancy arises because some external USB hard drives identify themselves to the operating system as standard drives rather than removable storage, causing Device Control to treat them differently.

    To address this issue, you can enable an advanced device recognition feature in Device Control by modifying the system registry. You can refer to this article: WithSecure Elements Device Control not blocking "write access" or "executable launching" on USB mass storage devices - WithSecure Community

    This adjustment enhances Device Control's ability to recognize and manage external USB hard drives similarly to USB memory sticks, thereby enforcing the same data transfer restrictions.

Categories