Reference Guide

Security Management Server Virtual v10.2.10 AdminHelp
265
Advanced Port Control
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
Windows Port Control
This technology allows for control of all the physical ports on a Windows computer
(disable/enable/bypass), and can be customized by port type.
Subclass Storage: External Drive
Control
Full Access
CHILD of Class: Storage. Class:
Storage must be set to Enabled to use
this p
olicy.
This policy interacts with EMS Access
to unShielded
Media policy. If you
intend to have Full Access to media,
also set this policy to Full
Access
to ensure that the media is not set
t
o read only and the port is not
blocked.
Full Access: External Drive port does
not have read/write data restrictions
applied
Read Only: Allows read capability.
Write data is disabled
Blocked: Port is blocked from
read/write capability
This policy is endpoi
nt-based and
cannot be overridden by user policy.
Subclass Storage: Optical Drive
Control
UDF Only
CHILD of Class: Storage. Class:
Storage must be set to Enabled to use
this policy.
Full Access: Optical Drive po
rt does
not have read/write data restrictions
applied
UDF Only: Blocks all data writes that
are
not in the UDF format (CD/DVD
burning, ISO burning). Read data is
enabled.
Read Only: Allows read capability.
Write data is disabled
Blocked: Port is blocked fr
om
read/write capability
This policy is endp
oint-based and
cannot be overridden by user policy.
Universal Disk
Format (UDF) is an
implementation of the specification
known as ISO/IEC 13346 and ECMA
-167
and is an open vendor
-neutral file
system for computer
data storage for
a broad range of media.
To
encrypt data written to CD/DVD
media:
Set EMS Encr
ypt External Media =
True, EMS Exclude CD/DVD Encryption =
False, and Storage Class: Optical
Drive Control = UDF Only.
Subclass Storage: Floppy Drive
Read Only
CHILD of Class: Storage. Class: