DriveLock Standard
Port, device and drive control
 
Manufacturer: CenterTools
Infrastructure: Linux, Windows 2003 Server, Windows 7, Windows Vista, Windows XP, Windows Server 2008, Novell
Why try & buy this product?

Unauthorized use of peripheral devices on corporate computers can create security risks and support nightmares. USB thumb drives and other portable storage devices represent a danger to corporate data. Users who plug them into computers may inadvertently introduce viruses or spyware. Even worse, employees can copy large amounts of confidential data to these devices, and you won’t know in whose hands this data will end up.

DriveLock is a leading solution for controlling all peripherals in your network and securing your mobile data. Unparalleled flexibility and granular control mean that you can achieve this protection without adding to the workload for IT administrators. DriveLock has the best integration with Windows Active Directory.

Product description:

DriveLock Standard gives you complete and granular control over who is allowed to connect which device to a corporate computer. You can also control what users can copy to or from these devices. For example, you can prevent the use of music players, portable hard drives and novelty items, such as coffee warmers, without blocking approved devices, such as keyboards, mice and printers.
 

Administration

  • All configuration is done using a Microsoft Management Console (MMC) snap-in
  • Device Scanner allows you to find out which devices are or were ever connected to all computers in your network and simplifies the creation of rules
  • Easy client deployment using Group Policy or other software deployment system
  • Central configuration using Active Directory and Group Policy
  • Alternate configuration mechanism using configuration files via UNC path, HTTP or FTP
  • Supports Group Policy Management Console (GPMC) and NetIQ Group Policy Administrator
  • Remote connection to Client computers to temporarily unlock devices and to troubleshoot policy enforcement
  • Remote identification of devices connected to clients
  • Quick policy deployment using templates for common computer models (Dell, HP, IBM, etc.)
  • Deployment Wizard
  • Customizable taskbar notification with HTML text
  • Multilingual user interface (MUI), supporting 6 languages, more to be added soon
  • Anti-tampering mechanisms, such as an optional password for uninstalling DriveLock to prevent unauthorized disabling of the system protection

Data Filtering (1st of 7 solutions )
What can this solution do for you?

DriveLock Standard gives you control what can be copied to or from removable media.

Features related to this solution:

DriveLock Standard filters your in/outbound ports on to be copied confidential information. DriveLock can allow or block the copying of files according to your rules. File types are identified based on content, not just by file extension. You can choose from the many file types that DriveLock can identify, or you can create additional file definitions and even extend the rule processing by creating your own custom DLLs.

Device Control (2nd of 7 solutions )
What can this solution do for you?

DriveLock Standard controls the use of all devices. It gives you intelligent control of mobile devices, including digital cameras, MP3 players, cell phones, BlackBerry devices and many others. And that means that you can decide who can use which devices in your network. You can define general rules that apply to all devices of the same type and create detailed whitelist and blacklist rules for specific devices or models. DriveLock Standard enforces these rules throughout your network to help you prevent network instability and the loss of important data.

Features related to this solution:
  • Dynamically locks removable devices (USB memory sticks, floppy disks, CD-ROM, etc.)
  • Locks most types of devices (Bluetooth, Palm, Windows Mobile, Smartphones, card readers, imaging devices, network adapters, modems, sound, video and game controllers, cameras, printers and more)
  • Locks most types of ports, including USB controllers, 1394/Firewire controllers, PCMCIA controllers, infrared controllers, serial (COM) and parallel (LPT) ports
  • Configurable whitelists to allow access to devices (device type or device model)
  • Specific storage devices can be controlled based on their serial numbers
  • Separate access lists can be defined for every single device or group of devices
  • Access can be granted to any user or group
  • Fully integrated with Active Directory and Group Policy
  • Also supports most other network operating systems, including Novell NetWare and Linux
  • Policy enforcement dynamically adjusts permissions when another user logs on
  • Assign drive letters to removable drives to avoid conflicts with network drives
  • File filter to allow or deny coping of specific file types
  • Auditing of files that are read from or written to removable drives
  • Shadowing of files keeps a full record of the content of files that are copied to or from removable drives
  • Separate configuration of Read and Write access for removable drives
  • Drive access rules can be based on drive size or encryption status
Port Control (3rd of 7 solutions )
What can this solution do for you?

If you do not control your computer ports, you give the possibility of unauthorized peripheral devices being connected to your computer ports with all associated risks. As well as data transfer from the network to a peripheral device with risk of information theft or leakage, as well as in opposite direction with virus contamination or unwanted private photos in your network. DriveLock Standard gives you complete control over who is authorized to connect which device to your available USB or wireless computer ports.

Features related to this solution:
  • Blocks most port types (USB controllers, PCMCIA controllers controllers 1394/Firewire infrared controllers, serial (COM) and parallel (LPT) ports)
  • Configurable whitelists to authorize access to peripherals (type or model)
  • Separate access lists can be defined for each peripheral device or a group of peripherals
  • Access can be given to users and user groups
  • Full integration with Active Directory and Group Policy
  • Supports other network operating systems (Novell NetWare, Linux)
  • Dynamic policy is enforced when another user logs into the network
Auditing (4th of 7 solutions )
What can this solution do for you?

DriveLock Standard logs operations with peripheral devices, for example data transfer, read and write operations to and from removable storage media. Reports can be generated from log events.

Features related to this solution:
  • Event suppression for double events.
  • Cached events are stored in a file.
  • Advanced features including log configuration changes (including change details), use of management console, a temporary release of DriveLock agent, agent using remote control, encryption events, or launch an application blocking, network configuration changes.
  • Additional analysis capabilities of these events are possible by using the Security Reporting Center.
Network Profiles (5th of 7 solutions )
What can this solution do for you?

DriveLock Standard immediately recognizes when the computer is connected to a different network and applies the settings you configured for this network.

Features related to this solution:

With DriveLock Standard each drive, device or application whitelist rule can be set to apply to one or more network profiles, which correspond to specific networks. You can use network profiles to prevent connections to unapproved networks. You can also ensure whether devices or applications can be used while a computer is connected to your corporate network or while outside the office. To prevent network intrusions you can automatically disable wireless connections while a computer is connected to your company LAN.

Reporting (6th of 7 solutions )
What can this solution do for you?

Monitoring network activity is crucial for ensuring compliance with legal and corporate requirements. With the Security Reporting Center in DriveLock Standard you can consolidate network-wide information about device activity and data transfers by using the Security Reporting Center. You will get also multiple alerting mechanisms for DriveLock events.

Features related to this solution:

With the Security Reporting Center in DriveLock Standard you are able to choose from standard report formats or able to create your own customized reports from the auditing data. Dynamic report creation, flexible filtering and sophisticated grouping functionality combine to let you find the information you’re looking for within seconds. Once you have created a report, you can print it, export the data for further analysis or even send the report by e-mail.

Shadowing (7th of 7 solutions )
What can this solution do for you?

DriveLock Standard is able to create a shadow copy of files that are copied to and from removable storage media including memory sticks.

Features related to this solution:

With DriveLock Standard it is possible to use a limitation of the first x KB file. Exclusion is possible for a list of file extensions.