Re: Recommendations for Port/Device Lockdown software

Sebastian Gottschalk wrote:

> What about the solutions discussed in
> ?

Pardon my ignorance but how does one access that link?

>> In order to comply with a client requirement, I need to lock all ports
>> (USB, serial, parallel, CD/DVD, Firewire, etc.) to prevent potential
>> theft of data.
>
> Bullshit. There's always a way to tunnel through the network connection.
> For getting serious, you shouldn't ask, if there are any covert channels at
> all, but only how large their bandwidth it - and it can be surprisingly
> large sometimes.

No doubt, but I have a specification I was handed and I have try to
comply with it, whether it makes any sense or not.

Recommendations for Port/Device Lockdown software

I am looking for recommendations based on experience for Port/Device
lock software that would securely lock down all workstation ports,
either as a stand-alone service or capable of being administered from a
server. The OS is Windows 2000 for clients and 2000 & 2003 for the
Server. It does not have to be freeware or dirt cheap, as the company
is footing the bill.

I am evaluating products including Safend and VolumeShield and have not
looked at FileLock or DeviceWall yet. What I've found is that some seem
overly complicated and hard to install, requiring things like .NET and
IIS to run. Seems like the more complicated things get, the more
potential headaches they create. Effectiveness, ease of use and
reliability (like, what happens if the server crashes) are considerations.

In order to comply with a client requirement, I need to lock all ports
(USB, serial, parallel, CD/DVD, Firewire, etc.) to prevent potential
theft of data. However, we also need a way of allowing some users
access for backing up and of course, allow printers, mice and keyboards
to work.

Re: Recommendations for Port/Device Lockdown software

Post removed (X-No-Archive: yes)

Re: Recommendations for Port/Device Lockdown software

Post removed (X-No-Archive: yes)

Re: Recommendations for Port/Device Lockdown software

In article ,
Mark J. Wallin wrote:
>Sebastian Gottschalk wrote:

>> What about the solutions discussed in
>> ?

>Pardon my ignorance but how does one access that link?

Go to google groups advanced search. Near the bottom there is
an option to search by article-id. Paste in the part after news:
and before the terminating '>' -- i.e, paste in
44f47a9c$0$5157$9b4e6d93@newsspool1.arcor-online.net
and tell google groups to search. It's a fast search if the
article is there.

Re: Recommendations for Port/Device Lockdown software

"Mark J. Wallin" <"mjwallin"@ wrote:
> I am evaluating products including Safend and VolumeShield and have not
> looked at FileLock or DeviceWall yet. What I've found is that some seem
> overly complicated and hard to install, requiring things like .NET and
> IIS to run. Seems like the more complicated things get, the more
> potential headaches they create. Effectiveness, ease of use and
> reliability (like, what happens if the server crashes) are considerations.

Check out DeviceLock (www.protect-me.com/dl/). It is easy to install
and it has much more features than Safend, DeviceWall, VolumeShield all
together ;)

Re: Recommendations for Port/Device Lockdown software

"Mark J. Wallin" <"mjwallin"@ nospam> wrote:
> I am looking for recommendations based on experience for Port/Device
> lock software that would securely lock down all workstation ports,
> either as a stand-alone service or capable of being administered from a
> server. The OS is Windows 2000 for clients and 2000 & 2003 for the
> Server. It does not have to be freeware or dirt cheap, as the company
> is footing the bill.
>
> In order to comply with a client requirement, I need to lock all ports
> (USB, serial, parallel, CD/DVD, Firewire, etc.) to prevent potential
> theft of data. However, we also need a way of allowing some users
> access for backing up and of course, allow printers, mice and keyboards
> to work.

here's a product that offers access control for several devices, eg USB,
Firewire, com ports, IR, ...

http://www.protect-me.com/support.html

see the links for DeviceLock and PortsLock

you evaluate the effectiveness :)

Jeff

--
try a random act of kindness today -- you just might surprise even
yourself :)