Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
RE: Secondary Storage Device Policy Dec 14 2004 08:43PM
Russell, Dan (drusse05 harris com) (1 replies)
RE: Secondary Storage Device Policy Dec 22 2004 03:36PM
sanjiv (ska262001 yahoo co in)
Dan,

Do you know of any other similar device(s) with
same/similar functionality. Anything in freeware or
shareware? It should have at a minimum data logging,
alerting and control by ACL?

I believe the product should not have agents to be
installed on a user's desktop, because then the user
with admin privilege can stop the agent service!

Best Regards,
Sanjiv Agarwala
CISA, CISSP

--- "Russell, Dan" <drusse05 (at) harris (dot) com [email concealed]> wrote:

> Tim,
>
> You may also want to have a look at this product:
>
>
http://www.securewave.com/turcana/securewave/sanctuary_DC.jsp
>
> Dan Russell, GCIA, CISSP
> Harris Corporation, GCSD
> Information Assurance
> (321) 729-2787
> drusse05 (at) harris (dot) com [email concealed]
>
> "A nation that draws too broad a difference between
> its scholars and its
> warriors will have its thinking done by cowards, and
> its fighting done by
> fools." - Thucydides
>
>
> -----Original Message-----
> From: jkowall [mailto:jkowall (at) shocking (dot) net [email concealed]]
> Sent: Thursday, December 09, 2004 3:29 PM
> To: Tim Watkins; focus-ms (at) securityfocus (dot) com [email concealed]
> Subject: Re: Secondary Storage Device Policy
>
>
> Have you seen the GFI product which does this?
>
> http://www.gfi.com/lanpsc/
>
> I haven't used it, but its a good idea if you wish
> to stop the ipod
> pirates :)
>
> Tim Watkins wrote:
>
> >I am currently developing a policy in a Microsoft
> environment on the
> >use of Secondary Storage Devices. This is
> especially concerned with
> >Thumb drives and ensuring that they do not
> compromise security between
> >classified systems. Do any of you already have a
> policy in place?
> >Additionally, is there a simple way of removing the
> drivers from a
> >WinXP or 2000 environment so that these types of
> devices can not be
> >installed via plug and play? I have played around
> with the idea of
> >shutting down USB ports but there are just too may
> other things (mice,
> >keyboards, cac readers) that use them. If there
> was a way to know
> >(event viewer perhaps) or other means when one was
> attached, it would
> >also help.
> >
> >
> >
> >Tim Watkins
> >
>
>-----------------------------------------------------------------------

> >----
>
>-----------------------------------------------------------------------
----
> >
> >
>
>
------------------------------------------------------------------------
---
>
------------------------------------------------------------------------
---
>
>
------------------------------------------------------------------------
---
>
------------------------------------------------------------------------
---
>
>

__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus