topic Re: blocking USB pen drive in Endpoint

blocking USB pen drive

inadmin1 — Fri, 26 Aug 2022 11:44:32 GMT

Hi, is it possible to block Pen (USB) disk on key drives?

Re: blocking USB pen drive

_Val_ — Fri, 26 Aug 2022 14:43:47 GMT

Yes

Re: blocking USB pen drive

inadmin1 — Fri, 26 Aug 2022 16:02:20 GMT

How?

Re: blocking USB pen drive

Chris_Atkinson — Sat, 27 Aug 2022 23:51:39 GMT

Using Media Encryption & Port Protection (MEPP) features of Harmony Endpoint.

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Configuring-Media-Encryption.htm?tocpath=Configuring%20the%20Endpoint%20Policy%7CConfiguring%20the%20Data%20Protection%20Policy%7CConfiguring%20Media%20Encryption%20%2526%20Port%20Protection%7C_____0

Re: blocking USB pen drive

inadmin1 — Sat, 27 Aug 2022 05:12:26 GMT

The link is dead...

Re: blocking USB pen drive

Chris_Atkinson — Sat, 27 Aug 2022 06:36:23 GMT

Not sure why following the link isn't working, just search the admin guide from support centre for Harmony Endpoint.

Section: "Configuring Media Encryption & Port Protection"

Re: blocking USB pen drive

inadmin1 — Sat, 27 Aug 2022 07:09:55 GMT

Under port protection, the only thing that i saw there was "Windows_CE_Devices_USB".

It did not block access to USB stick/pen drive.

Re: blocking USB pen drive

Chris_Atkinson — Sat, 27 Aug 2022 09:07:53 GMT

Suggest investigating auto device discovery further e.g.

https://community.checkpoint.com/t5/Endpoint/Allow-only-authorized-USB/td-p/68039

Re: blocking USB pen drive

inadmin1 — Sat, 27 Aug 2022 10:01:13 GMT

but that explains how to exclude certain drives. I am at the previous stage- trying to block globally.

Re: blocking USB pen drive

_Val_ — Sat, 27 Aug 2022 15:21:10 GMT

Re: blocking USB pen drive

Chris_Atkinson — Sun, 28 Aug 2022 10:31:22 GMT

How did you configure the default read/write settings or rather what configuration have you done?

Re: blocking USB pen drive

TNatCLS — Thu, 10 Oct 2024 13:17:36 GMT

Hi. I have the same question. I read the user guide here, and I am in the right place in the UI, but the list of ports does not specify a USB drive for windows. How do I prevent USB (removable) storage from being used?

Re: blocking USB pen drive

alexeim — Thu, 24 Oct 2024 15:08:56 GMT

That works not on the port level, but on file IO level. Look for read/write policy settings for removable media. Untick "Allow unencrypted data" in read section and select "Block Any Data" in write section.

When you get removable storage media blocked you can create exclusions for specific drives based on the list of discovered devices.

Re: blocking USB pen drive

Mitja-S3NEXT — Thu, 24 Oct 2024 17:28:18 GMT

Windows Portable Devices - option blocked - in the port protection custom settings should solve the problem