Block Peripherals on Harmony Endpoint Media Encryption & Port Protection Blade

[Heisenberg]

Hi Check Mates,

I am trying to block read/write of CD/DVD from Harmony Endpoint using Port Protection but i cant see any device category for that.

Is this possible? if Yes what category should i use? and how to properly configure this?

Is there an SK that provides tables of what devices are included on specific device category?

Thank you checkmates

[Luiz_]

Here's what I see when I edit the shared action for Do not allow reading from any storage device and click on Add device. Are you able to do that? It may solve your problem 🙂

[MikeB]

Hi @Luiz_, how can we block CD/DVD devices from infinity Portal??? (Web Management for Harmony Endpoint)

[Luiz_]

Hello @MikeB 

Try going there:

For me it looks like CD/DVD is not natively added. You can go to New and do that.

Hope it helps!

[MikeB]

Im not able to find CD/DVD category for add a new Peripheral Device. 

 

[G_W_Albrecht]

Media Encryption >Exclusions Center > Add New Device

[MikeB]

Thank you @G_W_Albrecht, I will try with this "Device Override" option settings.

Curiously the CD/DVD category only appears in the Exclusion Center under "Device Override Settings" in Media Encryption Policy, but not when I try to add a "New Peripheral Device" in Port Protection Policy.

[Luiz_]

I could be wrong but to me it seems the "Category" is merely cosmetic.

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...

I think the Serial Number is actually what's going to act on accepting or blocking, not the category. For aesthetics you can select CD/DVD on the Icon option:

[G_W_Albrecht]

Yes, that is true - i also missed it there.