McAfee Device Control
Prevent unauthorized use of removable storage devices on your network and endpoints

Features & Benefits:

Protect your business from data loss
Gain visibility and manage what and how users copy valuable company data to removable media.

Maintain control over your confidential data
Monitor and regulate (with granular controls) how your employees transfer data to removable media, such as USB drives, MP3 players, CDs, DVDs, and Bluetooth devices — even when users are not connected to the corporate network.

Enable productivity while ensuring data protection
Specify detailed hardware- and content-based filtering, monitoring, and blocking of confidential data on any removable storage device. Ensure that employees continue to use allowed devices safely.

Centralize and simplify your security management
Use the centralized McAfee ePolicy Orchestrator (ePO) console to implement and enforce security policies that prevent confidential data from leaving the company’s control and being lost or stolen.

Prove compliance with less effort
Monitor real-time events and generate detailed reports that show auditors, senior management, and other stakeholders your compliance with internal and regulatory privacy requirements.

Device Control Management

Comprehensive device management helps control and block confidential data copied to removable storage devices. Device parameters such as product ID, vendor ID, serial number, device class, and device name can be specified and categorized. Furthermore, different policies such as block or encrypt can be enforced based on the content loaded onto the devices.

• Support for plug-and-play devices and removable storage devices.
• Removable storage devices can be blocked or made read-only
• Content-aware protection for removable storage devices.
• Integration with McAfee Endpoint Encryption for file folders and digital rights management (DRM) solutions.
• File access protection for files that reside on removable storage devices.
• The Citrix device rule blocks access to the thin-client device mapping: local drives, removable storage, printers, CD/DVD, clipboard, and more.
• Non-system hard disks rule blocks and monitors read-only files and provides notifications of user actions on fixed disk drives.

Centralized Management Through McAfee ePO Software

Integration with McAfee® ePolicy Orchestrator® (McAfee ePO™) software offers real-time event monitoring and centralized policy and incident management. It allows for easy collection of critical-usage data, such as sender, recipient, time stamp, and data evidence. With a click of a button, McAfee ePO software offers detailed reports to prove to auditors, senior management, and other stakeholders that internal and regulatory compliance measures are in place.

• Deploy and update McAfee Device Control agents via McAfee ePO software.
• Manage McAfee Device Control policies and incidents via McAfee ePO software.
• Integrate with McAfee ePO software for event monitoring, centralized reporting, and auditing capabilities.
• Set role-based access control (also known as separation of duties) by McAfee ePO software for incident review.
• Notify violators and/or managers automatically.
• Access helpdesk interface.

System Requirements:

The following are minimum system requirements only. Recommended requirements are in parenthesis, where applicable. Actual requirements will vary depending on the nature of your environment.

McAfee ePolicy Orchestrator (ePO) Server

• Operating systems
  • Microsoft Server 2003 Service Pack 1 (SP1), 2003 R2
• Hardware requirements
  • CPU: Pentium II-class or higher, 450 MHz minimum
  • RAM: 512 MB (1 GB recommended)
  • Disk space: 250 MB

Device Control Endpoint

• Operating systems
  • Microsoft Windows XP Professional with SP1 or higher
  • Microsoft Windows 2000 SP4 or higher
• Hardware requirements
  • CPU: Pentium III, 1 GHz or faster
  • RAM: 512 MB, 1 GB (recommended)
  • Disk space: 200 MB minimum
  • Network connection: TCP/IP for remote access

McAfee Device Control specifies which devices can be used and what data can be copied.

Documentation:

Download the McAfee Device Control Datasheet (PDF).