Author Topic: CESM Blocking ALL USB access  (Read 2266 times)

Offline it_pro-it

  • Newbie
  • *
  • Posts: 10
CESM Blocking ALL USB access
« on: March 14, 2014, 04:22:50 PM »
How would i go about blocking all usb access(usb drives) but still allowing usb phones to be plugged in?
« Last Edit: March 14, 2014, 10:12:08 PM by it_pro-it »

Offline georgianas

  • CESMUser
  • Comodo Family Member
  • *
  • Posts: 68
Re: CESM Blocking ALL USB access
« Reply #1 on: March 15, 2014, 05:06:50 AM »
Hi,

Unfortunately that's not possible, for now you can either deny or allow all access to usb mass storage device.
More features will be added to usb management in a future ESM release.

Offline it_pro-it

  • Newbie
  • *
  • Posts: 10
Re: CESM Blocking ALL USB access
« Reply #2 on: March 16, 2014, 11:13:03 PM »
Hi,

Okay this would have to be done on workstation per basis.
How do i go about do this per workstations?

Thanks

Offline georgianas

  • CESMUser
  • Comodo Family Member
  • *
  • Posts: 68
Re: CESM Blocking ALL USB access
« Reply #3 on: March 17, 2014, 04:35:51 AM »
Hi,

Please create/discover a policy and then modify it.
http://help.comodo.com/topic-84-1-496-5299-Configuring-System-Settings.html
Apply the policy on other endpoints.

Offline MichelB

  • Comodo's Hero
  • *****
  • Posts: 516
Re: CESM Blocking ALL USB access
« Reply #4 on: March 18, 2014, 03:01:57 PM »
Your 'phones should not be detected as Mass Storage Devices so blocking USB ports should not affect them.

Kind regards,
Michel.

Offline PepperdotNet

  • Comodo Family Member
  • ***
  • Posts: 51
Re: CESM Blocking ALL USB access
« Reply #5 on: March 20, 2014, 04:24:39 PM »
Depends on what kind of phone it is. I'm pretty sure my Windows Phone is a mass storage device; if I plug it in, I can copy stuff to and from it without having to install any special drivers or software first.

Offline MichelB

  • Comodo's Hero
  • *****
  • Posts: 516
Re: CESM Blocking ALL USB access
« Reply #6 on: March 24, 2014, 04:29:28 PM »
If you create a policy with USB disabled and apply it to your endpoint is the 'phone still available for copying data?

Kind regards,
Michel.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek