blocking USB pen drive

[inadmin1]

Hi, is it possible to block Pen (USB) disk on key drives?

[_Val_]

Yes

[inadmin1]

How?

[Chris_Atkinson]

Using Media Encryption & Port Protection (MEPP) features of Harmony Endpoint.

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...

[inadmin1]

The link is dead...

[Chris_Atkinson]

Not sure why following the link isn't working, just search the admin guide from support centre for Harmony Endpoint.

Section: "Configuring Media Encryption & Port Protection"

[inadmin1]

Under port protection, the only thing that i saw there was "Windows_CE_Devices_USB".

It did not block access to USB stick/pen drive.

[Chris_Atkinson]

Suggest investigating auto device discovery further e.g.

https://community.checkpoint.com/t5/Endpoint/Allow-only-authorized-USB/td-p/68039

[inadmin1]

but that explains how to exclude certain drives. I am at the previous stage- trying to block globally.

[Chris_Atkinson]

How did you configure the default read/write settings or rather what configuration have you done?

[_Val_]

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Harmony-Endpoint-Admin-Guide/...

[TNatCLS]

Hi. I have the same question. I read the user guide here, and I am in the right place in the UI, but the list of ports does not specify a USB drive for windows.  How do I prevent USB (removable) storage from being used?

[alexeim]

That works not on the port level, but on file IO level. Look for read/write policy settings for removable media. Untick "Allow unencrypted data" in read section and select "Block Any Data" in write section.

When you get removable storage media blocked you can create exclusions for specific drives based on the list of discovered devices.

[Mitja-S3NEXT]

Windows Portable Devices - option blocked - in the port protection custom settings should solve the problem