Dear,
I'd like to set all USB port is read only for external drive for data protection.
*File read to PC from external drive. <= support. Read only.
*File copy from PC to external drive. <= Block.
Would you please advise where & how can I set it with my sophos admin permission?
Thank you,
Thank you for reaching community forum.
Yes, this is possible with Data Control Policy. You need to create a content rule first. To understand more about Content Rule, refer to this Documentation. In your scenario, a file rule will be suitable though you need to define all file types you wish to block for the outward transfer direction. Also, you need to define the destination as well as their actions.
Thank you for your adivse.
As my admin permission, I can see the menu in SOPHOS CENTERAL page as the image below.
Would you please advise where can I go to the menu to create the content rule?
You will need to navigate to "Endpoint Protection > Policies" to view the Data Loss Prevention policy for editing.
The Peripheral Control policy may also offer some options for controlling access to removable devices.
For each peripheral type, you can change the access policy:
Sophos's options may not accomplish exactly what you're looking for, as they have slightly different use cases.
*File read to PC from external drive. <= support. Read only.
*File copy from PC to external drive. <= Block.
You can also use GPOs to control access to removable media.
- Computer Configuration > Administrative Templates > System > Removable Storage Access
You will need to navigate to "Endpoint Protection > Policies" to view the Data Loss Prevention policy for editing.
The Peripheral Control policy may also offer some options for controlling access to removable devices.
For each peripheral type, you can change the access policy:
Sophos's options may not accomplish exactly what you're looking for, as they have slightly different use cases.
*File read to PC from external drive. <= support. Read only.
*File copy from PC to external drive. <= Block.
You can also use GPOs to control access to removable media.
- Computer Configuration > Administrative Templates > System > Removable Storage Access
