Give access to known proteced

[Vishnu_prasath]

Hello Mates,

I want to know if media encryption can stop my encrypted USB media from being able to be write access to by unprotected devices (those without a harmony endpoint). and allow writing access to known non-protected devices (those without harmony endpoints).

[CheckMatesAI]

This answer is provided by Infinity AI Copilot and should be confirmed by reviewing official documentation in Support Center.

Yes, Check Point's Media Encryption & Port Protection can be configured to control write access to encrypted USB media based on whether the device is protected by Harmony Endpoint.

Here's how it works:

• Protected Devices: Devices with Harmony Endpoint can be configured to allow full read/write access to encrypted media. This ensures that only authorized and protected devices can modify the data.

• Unprotected Devices: For devices without Harmony Endpoint, you can set policies to restrict write access. However, users can still access business data from these devices if a password is provided during the encryption process. This allows for read-only access unless otherwise specified by policy.

• Policy Configuration: You can define specific write actions in the Media Encryption settings, such as:

  • Allowing only encrypted files to be written.
  • Blocking any data writing to unprotected devices.
  • Allowing user overrides with justification, if necessary.

For more detailed configuration, you can refer to the Harmony Endpoint Administration Guide.

If you need further assistance with setting up these policies, feel free to ask!

[Vishnu_prasath]

I have encrypted my usb and moved a text file to the media after that i am unable to decrypt it

[PhoneBoy]

Please explain the precise steps taken here. Possibly with screenshots.

[Vishnu_prasath]

Hello PhoneBoy,

I encrypted my USB and moved a file to it. After that, I am unable to remove the encryption. Please see the screenshot below,

[PhoneBoy]

There is no decryption option for removable drives, as far as I know.
However, if you put the drive into a system without Harmony Endpoint installed, the encrypted part of the drive is a file.
You should be able to remove that along with the .exe to access it. 
Or, worst case, reformat the drive.