The most recent content from our members.
We've seen time and again that dividing your security attention between the inside and the outside threat (and unfortunately the blend of both - when outsider leverages or becomes an insider) is an ongoing challenge. If you check out our last 1-2 years of Federal IT Security Surveys, you'll see the insider is still a…
Needing help configuring USB Defender. I have followed all the steps to configuring it, but neither see an alert in the console nor are unauthorized USB devices shut down on the client machine. Here is what I've done: * Created a white list of approved devices (based on the Hardware ID value in Windows), * Uploaded the…
I have accomplished the following for USB Defender configuration: * Uploaded text file whitelist to USB Defender Local Policy connector, * Created matching list on LEM as user defined group, * Loaded USB Defender Extended connector, * Cloned rule to Detach Unauthorized Devices. So I'm ready to test this, but before I do I…
The usage of flash drives or USB removable media is quite common in any workplace; but having a closer look at it, it is potentially an internal security threat. In the past few years, we have seen so many organizations tracking down the loss of sensitive/confidential information to have happened owing to usage of USB…
Hi For some reason I am getting daily on some PCs events which display effectively simultaneously; USB Defender stopped, and USB Defender running. These events have Service Stop, and Service Start in the Event Name. Why are these occurring and how can I stop them? Thanks
I am building the white list for allowed USB devices. We have a specific device that our field vendors use, which is an ALADDIN usb drive. I've whitelisted (6) different ones so far all with different device IDs. Is it possible to simple allow the entire ALADDIN vendor device ID so I do not have to allow each and every…
Hi, I want to block absolutely all USB devices except keyboards and mice - I have created a rule but it does not appear to work! The rule is quite simple - Correlations: Systemstatus.EventInfo="Attached" SystemStatus.ProviderSID="USB" Correlation Time: Events Within: 30 seconds Response Window: 5 minutes (default) Actions:…
I have implemented USB Defender with the SWI-LEM 5.5 and it works well for most USB devices. If the device hasn't been white listed by its unique ID, it is blocked. If it is white listed, you can use the device. Welcome the Nexus One Android smart phone. When it is connected to a PC, no events are logged. The user can…
It looks like you're new here. Sign in or register to get started.