Configuration Protection USB 3.0 Root HUB blocked

Daniel,

Unless the article referenced by ChrisD is something different which works, then I can't see any other way around it, other than allowing the ports, but blocking the devices (like we have).

At this point you're in the same boat as us.

Over the years I have learned to keep my own record of the various Sophos defects and re-skin our environment in order to come up with my own workarounds. Helps to be creative.

Now and then I just chase up to see if the defects are fixed but quite often they are not - either because other defects have taken priority because more customers have been affected by it, or defects were more lets say "privledged" customers have been affected.

I feel your pain! Sorry I couldn't be of more help.

John

P.S. With CP there's one sure way to workaround unauthorised devices no matter how you lock down your ports... (E-SATA).

Currently CP doesn't control E-SATA, so you'll have to lock this down at the BIOS level. At best you'll have a local device encryption policy, and anyone who plugs in an E-SATA device will have their data encrypted and think twice about it next time.

Daniel,

Unless the article referenced by ChrisD is something different which works, then I can't see any other way around it, other than allowing the ports, but blocking the devices (like we have).

At this point you're in the same boat as us.

Over the years I have learned to keep my own record of the various Sophos defects and re-skin our environment in order to come up with my own workarounds. Helps to be creative.

Now and then I just chase up to see if the defects are fixed but quite often they are not - either because other defects have taken priority because more customers have been affected by it, or defects were more lets say "privledged" customers have been affected.

I feel your pain! Sorry I couldn't be of more help.

John

P.S. With CP there's one sure way to workaround unauthorised devices no matter how you lock down your ports... (E-SATA).

Currently CP doesn't control E-SATA, so you'll have to lock this down at the BIOS level. At best you'll have a local device encryption policy, and anyone who plugs in an E-SATA device will have their data encrypted and think twice about it next time.