Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 3414 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Read-only access to MTP devices?

DanW

Hi,

We are currently implementing Sophos device control on our network, including blocking access to USB storage devices.

Our employees use Android mobiles (Galaxy A3's) which many of them connect to their PC's via USB in order to transfer photos (only from phone to PC, not the other way).

However, looking at the device control policy for MTP/PTP devices, the only options are Blocked, or Full Access. Is there any way to allow just read-only access to these devices?

thanks

Dan



This thread was automatically locked due to age.
Parents
  • 0

    Hello Dan,

    MTP/PTP is a communication protocol, devices don't appear as storage devices. You can't restrict access to read-only.
    Are you worried that users might transfer potentially sensitive files to their mobiles?

    Christian

  • 0 in reply to QC

    Hi Christian

    Thanks for the reply, yes I realised after more investigating that this is limitation of the protocol itself rather than Sophos.

    We would prefer that users can only copy files from their phones to their computers, but not in the opposite direction. Even if there was a read-only option, I realise there are various ways to get around this, but we just want to make it as difficult as we can for users to take data out of our network.

    thanks

    Dan

Reply
  • 0 in reply to QC

    Hi Christian

    Thanks for the reply, yes I realised after more investigating that this is limitation of the protocol itself rather than Sophos.

    We would prefer that users can only copy files from their phones to their computers, but not in the opposite direction. Even if there was a read-only option, I realise there are various ways to get around this, but we just want to make it as difficult as we can for users to take data out of our network.

    thanks

    Dan

Children
No Data
Unfiltered HTML