Removable Media Encryption - Not Working.

Hi David,

In safeguard we just log fixed drives, removable drives are not reported.

Have you setup your removable media policy with file encryption and to prompt for encryption when the drive is connected?

Does the drive show as removable media when plugged in to the PC, if it just shows as an internal drive (which I find sometimes happens with my 32gb stick) then that won't be covered under the removable media policy (it would require a non-boot volume encryption policy).

Try using a smaller pen drive and if you can post a screenshot of your policies for removable media that would be great.

Thanks for your reply Toby.

I have tried smaller USB drives, they behave the same - windows 10 reports them as "USB drives".

I cannot see the option to prompt for encryption on the policy - I have added a screenshot below;

Thanks,

Hi David - When you installed Sophos on the client if you didn't use the switches or did a "Typical" install it may not have installed the extra functions needed for data exchange?

If you choose "custom" then you can modify the following settings....

Michael,

This solved my problem. I had to set "synchronised encryption" as not available and all the location based file encryption to install.

Everything appears to work as it did, along with the addition of the USB encryption now, many thanks.

Ah great news - well done! :)