Protect Against Portable Devices

In today's world we need access to data even when we're on the move. To

achieve that, we use all kinds of portable devices, which are very handy source

of transferring data. But the flip side is that these devices have also become a

popular carrier for malware to enter a network. GFI EndPoint Security is a tool

that is used to control access to network for portable storage media and other

devices such as USB drives, CDs, DVDs, network adapters, PDAs, printers, imaging

devices and floppies. In addition, it also protects your network against threats

posed by existing non-removable media, such as data theft and virus infection

from within your network.

One of the best things in this utility is that it's easily configurable and

can be controlled via Active Directory. It provides group based control

protection which helps you set different protection levels for PCs, at the same

time retaining previous settings. This software can also be used to configure

user permissions to fully deny access to devices or configure them in read only

or 'full access' mode.

How to use



Installing GFI Endpoint security is simple. It can be installed on Windows

2000, 2003 and XP Pro. When you first open the software, a quick start wizard

will popup to guide you through the steps required to set up GFI EndPoint

Security. The wizard will ask you to specify the computers you want to protect

in the domain. By default, GFI has three access protection policies for servers,

laptops and workstations.

You can specify which group or user can have full access or read only access to a particular device type

You can also customize these policies. To create a new protection policy goes

to File and then open New Protection policy. Here you will have to specify a

unique name and description for the protection policy. Now select the portable

devices to be controlled by selecting the device and then click on Add. You can

also specify the users and groups that will be allowed to access the device in

this policy. An important thing to remember is that, a non-controlled device is

fully accessible by all users, while a controlled device with an empty list of

users is completely blocked

Next you have to deploy protection policy updates on target computers and

verify that policy updates have been successfully deployed. You can view the

security event logs generated by GFI EndPoint Security. The event can be viewed

using Windows Event Viewer or in a centralized location like SQL Server. When a

deployment process has ended, the software will generate a report about the

results of the deployment with details such as the list of systems where

deployment was successful and those where it was not, along with the reasons

thereof.