USB Port Read only, external drive for data protection.

Question

Dear, 
 I'd like to set all USB port is read only for external drive for data protection. 
 *File read to PC from external drive. <= support. Read only. 
 *File copy from PC to external drive. <= Block. 
 Would you please advise where & how can I set it with my sophos admin permission? 
 
 Thank you,

GlennSen · Answer

Thank you for reaching community forum. 
 Yes, this is possible with Data Control Policy. You need to create a content rule first. To understand more about Content Rule, refer to this Documentation . In your scenario, a file rule will be suitable though you need to define all file types you wish to block for the outward transfer direction. Also, you need to define the destination as well as their actions.