All Products: Which CB Products Can Block USB Device Access

Products

• Carbon Black App Control (formerly Cb Protection)
• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Which VMware Carbon Black products can be used to block USB device read and write access? 

Environment

• Endpoint Standard Sensor:
  • Windows: 3.6.0.1897 and Higher
  • Apple macOS: 3.5.3.82 and Higher
• EDR Sensor: All Versions
• App Control: All Versions
• Microsoft Windows: All supported versions
• Apple macOS: All supported versions

Resolution

• App Control (formerly CB Protection) can restrict USB activity including read and write access.
• Carbon Black Cloud can restrict USB activity including read and write access on Windows endpoints with version 3.6.0.1897 and Higher and macOS endpoints with version 3.5.3.82 and Higher
• Carbon Black Cloud does not offer USB blocking on Linux devices
• EDR can detect but not block USB device access