Port protection policy for local users and PCs

[basil_hol]

Hello dear colleagues 

I have double quetsion about port protection policies in SmartEndpoint R81.10:

1) Is it possible to block usb-ports for local users on PCs that are in windows domain?

2) Is it possible to use device control (storages, printers etc) on specified PCs without binding to users?

Thank you

[PhoneBoy]

I believe you can do machine and user-specific policies for both of these items.

[basil_hol]

Thank you for believing, but I need some help
at least some specific SK (I didn't find) or section in Admin Guide

[Chris_Atkinson]

This should help to start:

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...

[basil_hol]

Thank you, that's great
But our network doesn't have any accsess to clouds. So the only thing I can use is SmartConsole (R81.10) and SmartEndpoint Manager. In this case, as I understand, Media Encryption&Port protection policy can be applicable to domain users, not PCs/local users

[Chris_Atkinson]

Note the Web Management was introduced starting R81 for non-cloud managed environments.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_HarmonyEndpointWebManagement...

[basil_hol · Accepted solution]

Thanks everyone

My company has license that doesn't allow configuring MEPP for PCs. 

Topic can be closed