Reference Guide

Security Management Server v10.2.7 AdminHelp
315
Subclass Storage: Optical Drive Control UDF Only
CHILD of Class: Storage. Class: Storage must be set
to Enabled to use this policy.
Full Access: Optical Drive port does not have
read/write data restrictions applied
UDF Only: Blocks all data writes that are not in the
UDF format (CD/DVD burning, ISO burning). Read
data is ena
bled.
Read Only: Allows read capability. Write data is
disabled
Blocked: Port is blocked from read/write
capability
This policy is endpoint
-based and cannot be
overridden by user policy.
Un
iversal Disk Format (UDF) is an implementation
of the specification known as ISO/IEC 13346 and
ECMA
-167 and is an open vendor-neutral file
system for computer data storage for a broad
range of media.
To encrypt data written to CD/DVD media:
Set EMS Encrypt
External Media = True, EMS
Exclude CD/DVD Encryption = False, and Storage
Class: Optical Drive Control = UDF Only.
Subclass Storage: Floppy Drive Control Read Only
CHILD of Class: Storage. Class: Storage must be set
to Enabled to use this policy.
Full Ac
cess: Floppy Drive port does not have
read/write data restrictions applied
Read Only: Allows read capability. Write data is
disabled
Blocked: Port is blocked from read/write
capability
This policy is endpoint
-based and cannot be
overridden by user policy.
Port: PCMCIA Enabled
Enable, Disable, or Bypass port access to PCMCIA
ports.
Port: Firewire (1394) Enabled
Enable, Disable, or Bypass port access to external
Firewire (1394) ports.
Port: SD Enabled
Enable, Disable, or Bypass port access to SD card
ports
.
Port: Memory Transfer Device (MTD) Enabled
Enable, Disable, or Bypass access to Memory
Transfer Device (MTD) ports.
See basic settings
Windows Device Control
This technology allows for control of all the devices on a Windows computer (disable/enable), and can
be customized by device type.
Class: Other Enabled
Control access to all devices not covered by other
Classes.
See basic settings
Global Settings
Global Settings policies are available at the Enterprise, Endpoint Groups, and Endpoints levels. All
Global Settings policies are endpoint-based, meaning the policies follow the endpoint, not the user.
Audit Control policies are available at the Enterprise, Endpoint Groups, Endpoints, User Groups, and
Users levels.