This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Data Control: created policy refuses to allow saving direct to flash drive

Hello,

I've scoured the Net looking for an answer to this before posting but can't seem to find anyone that's had this issue.

Under Sophos Enterprise Console (5.1.0.1839), the Data Control default policy was set to allow multimedia files to be saved directly to flash drives.  I've attempted to save multimedia (specifically sound files, MP3, MP4, etc.) to a flash drive and am told that it's blocked by Sophos.  I then created a new policy allowing the multimedia AND Microsoft Office documents to be saved to removable media. 

I applied the policy to the IT group for testing, made sure my computer was listed as compliant with the policies and tried to save a file from either an audio editor or Word to my flash drive.  No dice.  I rebooted my computer and let it sit for a couple of hours to make sure the files would "trickle in", as it seems policies take a while to stick and I still can't save multimedia files or Office files directly to the flash drive.

Granted it's really no big deal to just save to a folder locally or on the network and copy it but in other departments I have users that want the convenience of saving to a flash drive or have programs that get picky on where the file saves.  From everything I've read Sophos should be able to allow this but for whatever reason it's just not.

Anyone have any ideas what I can check?

Thanks!

:48232


This thread was automatically locked due to age.
Parents
  • Hello DMahlen,

    Data Control does not block anything by default. As far as logging is concerned, it will log those events which could/would potentially be blocked (not all, there is some consolidation window) - that is, Explorer events are logged but not the 'must use Explorer' ones.

    So, your rules specify what is to be blocked (with the consequences mentioned in my previous reply). Keep in mind - Data Control is about prevention of data leakage, user experience is not the top priority (this is not Sophos' fault)

    Christian
    :48282
Reply
  • Hello DMahlen,

    Data Control does not block anything by default. As far as logging is concerned, it will log those events which could/would potentially be blocked (not all, there is some consolidation window) - that is, Explorer events are logged but not the 'must use Explorer' ones.

    So, your rules specify what is to be blocked (with the consequences mentioned in my previous reply). Keep in mind - Data Control is about prevention of data leakage, user experience is not the top priority (this is not Sophos' fault)

    Christian
    :48282
Children
No Data