Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Endpoint Standard: Is there anyway to have Endpoint Standard Device Control block access to cell phones?

Endpoint Standard: Is there anyway to have Endpoint Standard Device Control block access to cell phones?

Environment

  • Carbon Black Cloud Console: November 20 Release (0.60) and Higher
  • Endpoint Standard Sensor: 3.6.0.1897 and Higher
  • Endpoint Advanced: 3.6.0.1897 and Higher
  • Endpoint Enterprise: 3.6.0.1897 and Higher

Question

Is there anyway to have Endpoint Standard Device Control block access to cell phones?

Answer

  • Not currently
  • The Endpoint Standard sensor only tracks mounted volumes
  • Some phones, cameras, and other media devices use the Media Transfer Protocol (MTP) or Picture Transfer Protocol (PTP) to transfer media files to/from the machine without ever mounting as a volume

Additional Notes

Device Control only controls USB Mass Storage Devices (removable hard disks, USB thumbsticks, SDHC cards etc) peripherals that the operating system identifies as a mounted volume/drive 

Related Content


Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎01-08-2021
Views:
712
Contributors