This article provides an overview of the Device Control update that supports the Media Transfer Protocol (MTP) and Picture Transfer Protocol (PTP) devices on Windows. The following sections are covered:
Applies to the following Sophos products and versions Enterprise Console
This allows the administrator to set a policy in Device Control to govern their required access. Common types of MTP devices include Blackberry, iPhone and various types of Android smartphone. PTP is commonly used on digital cameras.
Note: Some devices can be switched between MTP and removable storage mode. Some examples include Blackberry smartphones. When connected to a PC in removable storage mode, you must configure a Removable Storage policy in the Device control.
Media Devices will be shown as a new device type in the Device Control policy Configuration tab.
Since there is no physical connection to the computer, device control cannot control the transfer of data from devices connecting over WiFi. Sophos Client Firewall can be configured to block such transfers.
In order to provide complete coverage on all platforms, some additional devices may be unexpectedly blocked. This occurs when the device connected to the computer presents itself as an imaging device. This device type is used by some popular smartphones. Use the Add exemption button in the corresponding Device Control policy to allow these devices to operate fully.
Yes, as a result of setting the Device Control to block MTP/PTP device access, some devices (such as the Apple iPhone) will not be able to charge via the USB port on the endpoint.
Upon testing an iPhone running iOS 8.1, it was observed that if the phone was plugged into the computer before the policy to block was configured, the phone continued to show the symbol for charging. Once the phone was unplugged and reattached it was no longer able to charge itself. You may also want to read the discussion on the community.
Note: We do not maintain a list of devices that are still able to charge when the status is set to Blocked in the Device Control.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.