Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 1216 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is it possible to only access encrypted removable storage?

apijnappels
I just tried to configure device control with the following:

Removable storage: Blocked
Encrypted storage: Allowed

However this will block all removable storage devices including (bitlocker) encrypted devices.

Is it in any way possible to use device control to only allow encrypted removable storage devices and block all non-encrypted ones?


This thread was automatically locked due to age.
  • 0
    Does anyone know if this is possible and if yes, how ?

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0
    Arno, I think the Blocks are applied first, and then the Allows, and that there's no logic operation possible.  You can allow Exceptions though, and that might solve your problem.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0
    The exception is does indeed seem to work but is not the right solution. This exception is placed on the device and says that device X can connect regardless of the policy.
    Problem with that is, that device X can still be used after first formatting it and using it unencrypted after that.

    Managing several Sophos UTMs and Sophos XGs both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

    Sometimes I post some useful tips on my blog, see blog.pijnappels.eu/category/sophos/ for Sophos related posts.

  • 0
    I guess it's time for UTM (Formerly ASG) Feature Requests: Hot (1453 ideas)

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?