DeviceLock Service for Mac
DeviceLock Service for Mac is designed to help network administrators prevent unauthorized data transfers, block file copying and prevent software uploads and downloads.
Supporting a wide range of storage protocols, media and devices, DeviceLock Service for Mac provides highly customizable and flexible access control to internal and external storage devices such CD, DVD, BD burners, external disks, floppy drives, USB drives and pen-drives; controls access to WiFi and Bluetooth adapters, and provides managed access to, USB, FireWire, and serial ports. eSATA hardware can be controlled as Removable devices, while Thunderbolt devices can be controlled as Removable and WiFi hardware.
DeviceLock Service for Mac includes the following features:
•Access Control for Ports and Storage Devices. With DeviceLock Service for Mac, network administrators gain full control over who, when, and under what conditions can gain access to certain devices, ports. This helps prevent data leaks including unauthorized software installations.
•Audits User Activities. DeviceLock Service for Mac can audit user activity for a particular device type on a local computer. Based on the user’s security context, this capability allows administrators to audit activities that belong to a certain user or user group. The tool can create log files collected by DeviceLock Enterprise Server and displayed by management consoles.
•Data Shadowing. DeviceLock Service for Mac enables administrators to see what information exactly has been transferred by creating a shadow copy of all data sent or received via certain ports or devices. The system uses data shadowing to mirror all data copied to external storage devices. A full copy of files being transferred can be saved to a SQL database. Data shadowing can be defined on per-user basis.
•Active Directory Integration. Tight integration into the Active Directory makes DeviceLock Service for Mac easier to configure and manage, simplifies permission management and maintenance in large heterogeneous networks. Integrating DeviceLock Service for Mac into a network domain allows retrieving configuration settings from Active Directory via DeviceLock Enterprise Server.