Security Measures for computers against infected external drives??

[DiocampoJ]

---

Mayng hapon diha mga ka istorya.

Sa atong mga IT professionals diha, unsay paagi nnyo sa mga external drives nga e sak'2 sa mga workstations sa mga employee?

I was thinking about denying all access sa external drives sa workstations dri sa office through Group Policy. But in case anyone have a better idea, share lang

Thanks!

[DiocampoJ]

.........................

[boyguapo]

e disable ang usb para di ma detect tanan

[huryhoy]

Denying external drives through group policy is not a bad idea. But there are some users (specially from finance/HR personnel) need access for flash drives.

What I normally do, (since I got Sophos Endpoint Protection) all external drives, flash driver, etc. are blocked. But you can register/allow 1 or more USB drives for official use only. The rest of the USB drives that are not registered are blocked. At least you also have a record for monitoring purposes.

[dab_s_bad]

Denying external drives through group policy is not a bad idea. But there are some users (specially from finance/HR personnel) need access for flash drives.

What I normally do, (since I got Sophos Endpoint Protection) all external drives, flash driver, etc. are blocked. But you can register/allow 1 or more USB drives for official use only. The rest of the USB drives that are not registered are blocked. At least you also have a record for monitoring purposes.

Nice gyud tu-od ang Sophos, tried its firewall and its too darn restrictive, pang enterprise gyud!, na-a pa gyud end point/antivirus protection free for 10 users!

[JUND]

additional input - this can be done by editing registry without using any device hardware appliance.