Endpoint Standard: Is there anyway to have Endpoint Standard Device Control block access to cell phones?
book
Article ID: 285478
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Is there anyway to have Endpoint Standard Device Control block access to cell phones?
Environment
Carbon Black Cloud Console: November 20 Release (0.60) and Higher
Endpoint Standard Sensor: 3.6.0.1897 and Higher
Endpoint Advanced: 3.6.0.1897 and Higher
Endpoint Enterprise: 3.6.0.1897 and Higher
Resolution
Not currently
The Endpoint Standard sensor only tracks mounted volumes
Some phones, cameras, and other media devices use the Media Transfer Protocol (MTP) or Picture Transfer Protocol (PTP) to transfer media files to/from the machine without ever mounting as a volume
Additional Information
Device Control only controls USB Mass Storage Devices (removable hard disks, USB thumbsticks, SDHC cards etc) peripherals that the operating system identifies as a mounted volume/drive