Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 2994 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

allow read/write - no execute from usb stick?

whirrr

we're evaluating Sophos for use in a public library setting. I need to allow patrons to read and write documents from a usb thmbdrive, but  I also need to prevent them from executing programs from their device. Does anyone know if this is possible using Sophos?

Thanks!

:36511


This thread was automatically locked due to age.
Parents
  • 0

    Hi Whirr

    You wont be able to do this on the 'Execution' level. 

    If the commend to execute is given it doesnt magtter if it is a word doc that is opening, or an installer, However

    There are two features which may assist. 

    You can use the device control option to limit it to read only, but this is read only (And you have specified write - so it might not be as granular as you require)

    or

    The second feature is application control, prevent / block all programs sophos has available in the list other than what you permit (Such as block all skype/msn/bittorrents/browsers and allow only Adobe reader) Appliaction control will block installations of these programs if they are set to block.

    There are other features in endpoint which you can investigate, The firewall is super robust and granular, and NAC has vast capabilities. 

    Please feel free to voice your request - Sophos are open to growing the product and providing functionality that evolves with the landscape. 

    :36599
Reply
  • 0

    Hi Whirr

    You wont be able to do this on the 'Execution' level. 

    If the commend to execute is given it doesnt magtter if it is a word doc that is opening, or an installer, However

    There are two features which may assist. 

    You can use the device control option to limit it to read only, but this is read only (And you have specified write - so it might not be as granular as you require)

    or

    The second feature is application control, prevent / block all programs sophos has available in the list other than what you permit (Such as block all skype/msn/bittorrents/browsers and allow only Adobe reader) Appliaction control will block installations of these programs if they are set to block.

    There are other features in endpoint which you can investigate, The firewall is super robust and granular, and NAC has vast capabilities. 

    Please feel free to voice your request - Sophos are open to growing the product and providing functionality that evolves with the landscape. 

    :36599
Children
No Data