Comments on: Stop using USB in office computers http://itknowledgeexchange.techtarget.com/itanswers/stop-using-usb-in-office-computers/ Sat, 25 May 2013 17:28:03 +0000 hourly 1 By: cults14 http://itknowledgeexchange.techtarget.com/itanswers/stop-using-usb-in-office-computers/#comment-54648 cults14 Mon, 14 Jul 2008 16:13:52 +0000 #comment-54648 I’m not a techie, but that looks like a very simple question which needs fuller explanation i.e. why do you want to do this in the first place? If you’re concerned about DPL (Data Leak Prevention), prepare yourself for a rocky ride as (a) it’s still a relatively new area and (b) the range of options – problems/solutions and vendors – is almost overpowering.

If DLP is an issue for you, or if you’re concerned about the introduction of unwanted material (malware, 3rd party IPR, media-rich files etc etc) then how do you know that you have a problem in the first place?

General advice I’ve seen seems to be (a) install something like DeviceWall (granular policies) to monitor what’s actually going on (b) develop an Acceptable Use Policy (AUP) and (c) implement and monitor your AUP.

Disabling USB ports disables any kind of USB device and this may not be what you (or your users or managers) intend or find acceptable.

At the other end of the scale, Cisco have a product which does everything which DeviceWall (and others do), plus can prevent emailing, printing, copying, save as from specified folder locations – so if you’re paranoid about your IPR leaving the builing, it’s possible to go into complete lock-down – you can even disable screen captures!!

Hope this help.

]]>