topic Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade in Endpoint

Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

Heisenberg — Tue, 22 Jun 2021 06:23:54 GMT

Hi Check Mates,

I am trying to block read/write of CD/DVD from Harmony Endpoint using Port Protection but i cant see any device category for that.

Is this possible? if Yes what category should i use? and how to properly configure this?

Is there an SK that provides tables of what devices are included on specific device category?

Thank you checkmates

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

Luiz_ — Fri, 25 Jun 2021 02:38:20 GMT

Here's what I see when I edit the shared action for Do not allow reading from any storage device and click on Add device. Are you able to do that? It may solve your problem 🙂

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

MikeB — Wed, 25 Jan 2023 13:52:46 GMT

Hi @Luiz_, how can we block CD/DVD devices from infinity Portal??? (Web Management for Harmony Endpoint)

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

Luiz_ — Wed, 25 Jan 2023 13:58:45 GMT

Hello @MikeB

Try going there:

For me it looks like CD/DVD is not natively added. You can go to New and do that.

Hope it helps!

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

G_W_Albrecht — Wed, 25 Jan 2023 14:12:34 GMT

Media Encryption >Exclusions Center > Add New Device

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

MikeB — Wed, 25 Jan 2023 21:56:31 GMT

Im not able to find CD/DVD category for add a new Peripheral Device.

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

MikeB — Wed, 25 Jan 2023 22:00:36 GMT

Thank you @G_W_Albrecht, I will try with this "Device Override" option settings.

Curiously the CD/DVD category only appears in the Exclusion Center under "Device Override Settings" in Media Encryption Policy, but not when I try to add a "New Peripheral Device" in Port Protection Policy.

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

Luiz_ — Wed, 25 Jan 2023 22:08:07 GMT

I could be wrong but to me it seems the "Category" is merely cosmetic.

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/Topics-HEP/Configuring-Devices.htm

I think the Serial Number is actually what's going to act on accepting or blocking, not the category. For aesthetics you can select CD/DVD on the Icon option:

Re: Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

G_W_Albrecht — Thu, 26 Jan 2023 07:56:38 GMT

Yes, that is true - i also missed it there.