RE: Secondary Storage Device Policy

• Previous message: Paul: "Microsoft Vulnerabilities ARE being reported to Microsoft"
• In reply to: Russell, Dan: "RE: Secondary Storage Device Policy"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 22 Dec 2004 07:36:38 -0800 (PST)
To: "Russell, Dan" <drusse05@harris.com>

Dan,

Do you know of any other similar device(s) with
same/similar functionality. Anything in freeware or
shareware? It should have at a minimum data logging,
alerting and control by ACL?

I believe the product should not have agents to be
installed on a user's desktop, because then the user
with admin privilege can stop the agent service!

Best Regards,
Sanjiv Agarwala
CISA, CISSP

--- "Russell, Dan" <drusse05@harris.com> wrote:

> Tim,
>
> You may also want to have a look at this product:
>
>
http://www.securewave.com/turcana/securewave/sanctuary_DC.jsp
>
> Dan Russell, GCIA, CISSP
> Harris Corporation, GCSD
> Information Assurance
> (321) 729-2787
> drusse05@harris.com
>
> "A nation that draws too broad a difference between
> its scholars and its
> warriors will have its thinking done by cowards, and
> its fighting done by
> fools." - Thucydides
>
>
> -----Original Message-----
> From: jkowall [mailto:jkowall@shocking.net]
> Sent: Thursday, December 09, 2004 3:29 PM
> To: Tim Watkins; focus-ms@securityfocus.com
> Subject: Re: Secondary Storage Device Policy
>
>
> Have you seen the GFI product which does this?
>
> http://www.gfi.com/lanpsc/
>
> I haven't used it, but its a good idea if you wish
> to stop the ipod
> pirates :)
>
> Tim Watkins wrote:
>
> >I am currently developing a policy in a Microsoft
> environment on the
> >use of Secondary Storage Devices. This is
> especially concerned with
> >Thumb drives and ensuring that they do not
> compromise security between
> >classified systems. Do any of you already have a
> policy in place?
> >Additionally, is there a simple way of removing the
> drivers from a
> >WinXP or 2000 environment so that these types of
> devices can not be
> >installed via plug and play? I have played around
> with the idea of
> >shutting down USB ports but there are just too may
> other things (mice,
> >keyboards, cac readers) that use them. If there
> was a way to know
> >(event viewer perhaps) or other means when one was
> attached, it would
> >also help.
> >
> >
> >
> >Tim Watkins
> >
>
>-----------------------------------------------------------------------
> >----
>
>---------------------------------------------------------------------------
> >
> >
>
>
---------------------------------------------------------------------------
>
---------------------------------------------------------------------------
>
>
---------------------------------------------------------------------------
>
---------------------------------------------------------------------------
>
>

        
                
__________________________________
Do you Yahoo!?
Yahoo! Mail - You care about security. So do we.
http://promotions.yahoo.com/new_mail

---------------------------------------------------------------------------
---------------------------------------------------------------------------

• Previous message: Paul: "Microsoft Vulnerabilities ARE being reported to Microsoft"
• In reply to: Russell, Dan: "RE: Secondary Storage Device Policy"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]