topic Re: Media Encryption&Port Protection Read Only Access Problem in Endpoint

Media Encryption&Port Protection Read Only Access Problem

Sukru_isik — Tue, 27 Nov 2018 13:15:12 GMT

Hello all,

I have Checkpoint Endpoint with version R80.20.

I have configured all users ,without media owner, can access read only mode to encrypted media partition.

But when tried that other users can copy relevant files outside of usb.

How can I restrict this, is there any way to do that?

PhoneBoy — Wed, 28 Nov 2018 05:30:41 GMT

Think about it: if you can read the file, you can rewrite the file somewhere else very easily.

MEPP only controls the data that flows in and out of removable storage.

Sukru_isik — Mon, 03 Dec 2018 09:11:05 GMT

Hello Daemon,

Thanks for the update.

But I can not copy files from desktop ,which the agent is not installed, to USB on offline mode with this configuration.

Opposite this , I can copy files from USB to desktop.

PhoneBoy — Mon, 03 Dec 2018 16:06:16 GMT

Seems like expected behavior.

I assume the media in question was encrypted by MEPP.

When you're offline, you don't know who the user is.

As such, the "Read Only" permission applies.