USB Device Management

 

USB devices may present potential danger to the user’s computer and cyber security of a company. They may contain malware, including auto-starting exploits, which do not require any user action to start after plugging-in a device. Such devices may be also involved in data leakage. That is why USB devices or some specific types of them are frequently prohibited by corporate security policy.

 

Ekran System provides USB blocking software functionality as an important addition to the user activity monitoring features. Unlike hardware USB port blocker tools, which silently block USB ports from any kinds of devices, Ekran System gives you smarter adjustable software solution.

 

USB device management starts with configuring the rules to monitor and block USB devices of different types (i.e. mass storage devices, modems, human interface devices, video devices, etc.). You can assign different USB device management rules to different clients and client groups.

 

Using these rules, you can optionally:

 

  • Monitor connected USB devices. When a device of the specified class is connected to a monitored end-point, all its details will be logged together with all other user activity metadata.
  • Alert connected USB devices. When a device of potentially dangerous type is connected, your security personnel will receive a real-time alert notification by email or tray message.
  • Block connected USB devices. When a device of prohibited type is connected, it will be completely blocked and user can be optionally notified about this with a custom pop-up message.

 

To complement USB device blacklisting, Ekran System provides whitelisting functionality and exception list, where you can specify USB devices by hardware ID, vendor ID, and other parameters. Thus you make sure that all work-critical USB devices will be always enabled.

 

Besides providing monitored USB device information in the session indexed video logs, Ekran System can generate a specific type of report with all USB-device-related event details.

 

Complementing advanced user activity logging with USB device management, Ekran System is an efficient insider threat protection solution providing flexible and cost-saving deployment scheme.