Overview

The article details the process to block specific device models in GFI EndPointSecurity.

Process

To block device models within GFI EndPointSecurity perform the following steps:

• Add the device model you wish to block in the GFI EndPointSecurity device database
• Create a new policy preventing that particular device.

Add the device model you wish to block in the GFI EndPointSecurity device database.

1. Attach the device model you want to Block to a computer. This computer must be accessible by the GFI EndPointSecurity server since it must be scanned using the Device Scan utility in GFI EndPointSecurity.

2. Log in to the GFI EndPointSecurity server with administrative credentials.

3. Open the GFI EndPointSecurity Management Console.

4. Click on the Tools tab and click on Device Scan.

5. Enter the IP address or computer name of the computer you have attached the device to (in Step 1) under Scan target.

6. Ensure you have entered the appropriate administrative credentials to Scan the remote machine under Scan Details > Credentials,

7. Click on the Scan Button.

8. Find the list of all the devices which are currently attached to the computer under the Device List. Right click on the device you wish to block using GFI EndPointSecurity and click on Add to devices database.

Create a new policy blocking that particular device

1. Within the GFI EndPointSecurity Management Console, click on the Configuration tab.

2. Expand the Protection Policy you want to change, and click on the Security Node under that protection policy.

3. Under the Common Tasks section, click on the Add permissions(s) link.

4. Select Specific Devices under Control Entities, then click on the Next button to continue.

5. Find the new device which you have just added to your Device Library. Mark the checkbox near the device you wish to block and click on Next to continue.

6. Click the Add button to add any users you want to to this policy. Uncheck the Access/Read and Write check boxes if you wish to block this device.

7. Click Finish to add the new policy to the protection policy.

Note: After implementing the above configuration changes successfully, you need to deploy the protection policy updates for the changes to start taking effect.