USB Device Control

[Mr_Jiminy]

What does everyone use for USB device control?

[dloudon96]

Would you need to control them with the network or for a specific user? More info is needed.

 

Dan

[Roberto]

What does everyone use for USB device control?

 

What do you mean? We use a little utility that stops drive letters clashing with network drives but other than that, we really don't care too much.

[caffrey]

usbdlm + file restriction policy + anti virus

[Grey-gear]

Impero we use

[Mr_Jiminy]

We are looking to block by device type. Using a GPO serves a purpose, however it's too basic.

 

Caffrey what AV are you using? We're considering trialling Kaspersky and evening blinking Sophos.

 

Grey-gear was Impero provided by your LA or was this procured direct?

[dloudon96]

Impero is really good for everything, if you want to monitor students and provided remote access to both staff and or students get impero. It's costly but has absolutely loads of features.

 

We currently have it where I work and to tell you the truth I don't know what we would have done without it. Staff can also reset passwords, IT admins (us) can deploy software, set print quotas for students. It's worth looking at.

 

 

Dan

[Mr_Jiminy]

Impero is really good for everything, if you want to monitor students and provided remote access to both staff and or students get impero. It's costly but has absolutely loads of features.

 

We currently have it where I work and to tell you the truth I don't know what we would have done without it. Staff can also reset passwords, IT admins (us) can deploy software, set print quotas for students. It's worth looking at.

 

 

Dan

 

I take it also allows for blocking USB devices by type?

[dloudon96]

I'm not 100% sure however if you have a USB mouse and keyboard these should still work.

 

Hope this helps.

Mdan

[caffrey]

Just moved to ESET from Sophos, got a good deal - so far I'm liking it.

[Mr_Jiminy]

How granular can ESET get in regards to blocking specific devices?

 

We're looking at Kaspersky.

[caffrey]

Never needed to use the feature but it seems like you can

 

How do I add a new removable media blocking rule in my Windows ESET product? (5.x) - ESET Knowledgebase

[Arthur]

How granular can ESET get in regards to blocking specific devices?

You can block by Vendor, Model and Serial Number if you wanted to. Compared to USBDLM however, NOD32 is quite basic since the criteria is limited.

 

http://a.pomf.se/wqmnqi.png

 

http://a.pomf.se/yzlhxe.png

 

These screenshots are from NOD32 v8.0.