Protect your network from USB's

knowlesy

knowlesy

knowlesy

Soldato
Joined
6 Jan 2006
Posts
4,663
Location
Newcastle
So Im looking for some software (much like GFI's Endpoint Security but an alternative) to protect a network from people using USB devices on their desktops etc and taking work home or just using a usb to run software etc and block it.

I know of GFI Endpoint Security and it has fairly good reviews was just hoping for alternatives so I can say Ive reviewed them.

Thanks in advance
 
There are absolutely loads of software suites out there that do this.

McAfee is fairly terrible IME, they use Safend here which seems pretty good, Lumension is also a product I have heard good things about.

Start there, have a google about with any keywords you learn by reading up, research more, get some demo installs on the go in your test environment :)
 
We've got the Sophos produt on trial at our place, seems to be working quite well so far.
 
We had the Sophos one where I used to work, seemed quite good but we never rolled it out properly before I left.

Where I work now uses Sanctuary Device Control but Im no longer a SysAdmin so couldnt comment on what its like other than saying it seems to work well from my end.
 
hmmm so far Ive found Device Lock which they've offered me a web demo etc and have read a fair bit about it which looks to be what I want but that's all they seem to offer, so Im not sure if its just a couple of peeps just doing it; Whereas GFI is more of a well established company, I will have a look at the sophos software though TY.

Also its worth mentioning I'm not looking for an antivirus solution as well as the USB endpoint protection as Nod32 has just been acquired.

Side note: my boss is more in favor of GFI Endpoint as apparently GFI bought the Endpoint software and it "had good reviews before" so hes for it (as usually hes against GFI and TBH Im in agreement the web monitoring / filtering software Ive used is dire IMO)
 
We are using DeviceLock over around 250 PCs in our domain across 2 sites, works very well for us. I didn't implement it but can probably answer a few questions about it if you have any.
 
We have just rolled out sophos device lock to circa 1700 pcs and not had a single problem. Very good
 
Used Lumension (formerly Sanctuary) for a good number of years now and it's not too bad.

Not used anything else so can't really compare, a few quirky things with it but nothing show stopping.
 
checkpoint media protector (pointsec) it locks it all down, you can allow certain ones through on certain machines via policy.

trend micro officescan (virus checker) has one built in , (set to read only/no access) etc..
 
sophos here. we trialled gfi, but since we had functionality already built into sophos it seemed sensible to use this over an additional piece of software / management console, and obviously it was cheaper. the only real issue we've come across is that for some cameras we have had to allow 'full access' as opposed to 'read only' in order for them to work. and also, when it comes to connecting blackberry devices it sees the blackberry and its memory card slot as two distinct devices, which is fine in itself - but you cannot restrict it to just company supplied devices - if you permit one blackberry you permit them all. this is also true of card readers - if you allow a card reader then you also allow anything that is plugged into it. to be fair, i suspect the problems we've had is more down to how windows detects the device(s) rather than it being buggy / lack of function within sophos. other than that it works very well.
 
Another vote for Sanctuary. Very solid, mostly fire and forget.

I've seen it done with hacked together Group Policy (not very nice) and a Symantec product (whose name escapes me - quite workable).

In the past I have used other GFI products and have been happy with them.
 
Another vote for Sanctuary here.
Does the job, allows you to enable devices based on User Groups, Individual PC's, etc.
Just don't roll it out like my old IT Manager did..... pushed it out to an entire floor 'too see what would happen'. Cue many angry calls about printers\scanners\card readers\anything else plugged into a PC not working anymore. Bloody idiot.... :mad:
 
We use DeviceWall made by Centennial. It works pretty well but can block the odd cd/dvd that a user inserts, not overall its pretty good and VERY reliable, we haven't had a breach in a long time. It can also block a lot more things than just USB sticks too

Only downside is the current version doesn't support 64 Bit systems, apparently a new one is available in summer
 
Using sophos to do it here, albeit im not blocking them completely, just blocking exes, bat, cmd, reg etc files from running from pen drives.
 
You must log in or register to reply here.
Back
Top Bottom