Prevent executable files (*.exe,*.bat,*.com,...) from running on external drives

Question

Hi there, 
 
 we're using Sophos Central Intercept X in our domain and want to add a policy, that prevents our users to run or copy files from e.g. usb drives. 
 We want even go one stop further: we want to create such a rule in general, but want to allow some specific drives by their specific hw id. 
 Is there a way to make this possible with Sophos? 
 
 Regards Rob

Qoosh · Answer

Hello Robert, 
 Thank you for reaching out to the Sophos Community forum. 
 Currently, Sophos' Data Loss Prevention and Peripheral Control features don&rsquo;t have any overlap that would allow you to create such policies. 
 If you would like to see this functionality added to future versions of Sophos Endpoint, I recommend suggesting this idea using the following web page. - https://ideas.sophos.com/