Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 15 subscribers
  • Views 3587 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

USB Port Read only, external drive for data protection.

yonghyun kim

Dear, 

I'd like to set all USB port is read only for external drive for data protection.

*File read to PC from external drive. <= support. Read only. 

*File copy from PC to external drive. <= Block. 

Would you please advise where & how can I set it with my sophos admin permission?

Thank you, 



This thread was automatically locked due to age.
Parents
  • 0

    Thank you for reaching community forum. 

    Yes, this is possible with Data Control Policy. You need to create a content rule first. To understand more about Content Rule, refer to this Documentation. In your scenario, a file rule will be suitable though you need to define all file types you wish to block for the outward transfer direction. Also, you need to define the destination as well as their actions.

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0 in reply to GlennSen

    Thank you for your adivse. 

    As my admin permission, I can see the menu in SOPHOS CENTERAL page as the image below. 

    Would you please advise where can I go to the menu to create the content rule?

  • 0 in reply to yonghyun kim

    You will need to navigate to "Endpoint Protection > Policies" to view the Data Loss Prevention policy for editing. 

    The Peripheral Control policy may also offer some options for controlling access to removable devices.
    For each peripheral type, you can change the access policy:

    • Allow: Peripherals are not restricted in any way.
    • Block: Peripherals are not allowed at all.
    • Read Only: Peripherals can be accessed only for reading.

    Sophos's options may not accomplish exactly what you're looking for, as they have slightly different use cases. 

    yonghyun kim said:

    *File read to PC from external drive. <= support. Read only. 

    *File copy from PC to external drive. <= Block. 

    You can also use GPOs to control access to removable media. 
    - Computer Configuration > Administrative Templates > System > Removable Storage Access

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Reply
  • 0 in reply to yonghyun kim

    You will need to navigate to "Endpoint Protection > Policies" to view the Data Loss Prevention policy for editing. 

    The Peripheral Control policy may also offer some options for controlling access to removable devices.
    For each peripheral type, you can change the access policy:

    • Allow: Peripherals are not restricted in any way.
    • Block: Peripherals are not allowed at all.
    • Read Only: Peripherals can be accessed only for reading.

    Sophos's options may not accomplish exactly what you're looking for, as they have slightly different use cases. 

    yonghyun kim said:

    *File read to PC from external drive. <= support. Read only. 

    *File copy from PC to external drive. <= Block. 

    You can also use GPOs to control access to removable media. 
    - Computer Configuration > Administrative Templates > System > Removable Storage Access

    Kushal Lakhan
    Team Lead, Global Community Support
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
Children
No Data
Unfiltered HTML