Featured Eseminar Auditor Download GuardianEdge Federal GuardianEdge

“Three years before news stories of lost data were commonplace, we committed to whole disk encryption on all our laptops and field office computers. The decision is paying for itself many times over with saved notification costs, brand reputation, and by living up to our customer promise of protecting their identity and confidential information.”

—Pat Lefemine, Chief Information Security Officer, Lincoln Financial Group.

GuardianEdge Device Control

Flexible Control of PC Connectivity

From wireless to USB to Bluetooth, today’s PCs are connected in more ways than ever. These ports and protocols help to drive productivity, but they can also allow valuable or legally protected data to leave the organization while opening pathways for malware to enter. To keep PCs safe from data leakage and data loss, GuardianEdge Device Control allows enterprises to control access to connections, ports, and attached devices.



By deploying GuardianEdge Device Control, organizations can:

  • Prevent the unauthorized transfer of data from corporate PCs by restricting user access to external devices and ports
  • Maintain productivity by establishing fine-grained policies that align with the organization's business processes and the roles of users
  • Quickly Identify unprotected computers, ensure the proper controls are in place, and understand how employees are using permissions
  • Centrally manage and monitor port and device access control as an integrated component of an enterprise-grade data protection platform
  • Protects companies from the risk of loss or leakage of secrets, intellectual property, and the private information of customers and employees resulting from unrestricted access to external devices and ports
  • Reduces the cost and complexity of implementing and managing enterprise-wide access control by leveraging existing IT infrastructure
  • When combined with GuardianEdge Removable Storage Encryption provides multilayered data loss and data leakage prevention;
    • GuardianEdge Device Control controls the ports that are allowed to be open, and the devices that are allowed to connect to those ports
    • GuardianEdge Removable Storage Encryption ensuring that any data read from or written to those devices that you allow is protected from loss with encryption
 
External Ports
  • Disable or restrict read and write access
  • USB, FireWire, PCMCIA, secure digital (SD), parallel, serial, modem
Internal Ports
  • Logging and alert on status change
  • IDE, SCSI, ATA, SATA, PCI and PCI-X
Supported Devices
  • Supports a broad range of devices, including:
    • Printers
    • PDAs and smartphones
    • Network adapters
    • Imaging devices
    • Audio/video devices
    • Smartcards
    • User Interface devices (mice, keyboards, etc.)
    • Storage devices
    • and more
Wireless Connections
  • WiFi, Bluetooth, IrDA
  • WiFi control includes MAC address, SSid and security level of network
  • Prevents bridging by blocking WiFi, Bluetooth, IrDA, and modems while connected to the wired corporate LAN
Storage Control
  • Restrict data transfer activity
  • Removable storage devices, external hard drives, iPods, CD/DVD, floppy, tape, and more
File Control
  • Control file types allowed to be read from/written to devices
  • Approximately 200 built-in file types and 14 file categories
Device and Storage White Lists:
  • Make and model
  • Unique ID
CD / DVD Media White lists
  • Allow use or viewing of only approved specific CDs and/or DVDs
Anti-Hardware Keylogger
  • Blocks USB and PS/2 hardware key loggers
U3 and Autorun Control
  • Allows access to U3 drives only as regular USB drives by blocking smart functionality
  • Protects against auto-launch programs by blocking autorun
Internal/External Database support
  • Supports either the internal, provided SQL database, or an external SQL compatible database of your choice
File Shadowing (Platform Edition only)
  • Log and/or mirror a copy of all files written to removable media to a central file share
  • Load balance communications and storage across multiple repositories
Active Directory Integrated Administration and Management (Platform Edition only)
  • Tightly integrated with Active Directory, enabling GPO-based policy deployment
  • Role-based policy administration
  • Detailed audit records to verify policy enforcement
Complements GuardianEdge Removable Storage Encryption (Platform Edition only)
  • Ensures that any data that is allowed to be written to devices is protected with GuardianEdge Removable Storage’s highly secure, FIPS-certified encryption.
OS Support
  • Microsoft® Windows™ XP, Windows 2000, Windows XP Tablet PC, Windows 2003 Server, Windows Vista