OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
Device Control
8-2
Device Control regulates access to external storage devices and network resources
connected to computers. Device Control helps prevent data loss and leakage and,
combined with file scanning, helps guard against security risks.
You can configure Device Control policies for internal and external clients. OfficeScan
administrators typically configure a stricter policy for external clients.
Policies are granular settings in the OfficeScan client tree. You can enforce specific
policies to client groups or individual clients. You can also enforce a single policy to all
clients.
After you deploy the policies, clients use the location criteria you have set in the
Computer Location screen (see Computer Location on page 13-2) to determine their
location and the policy to apply. Clients switch policies each time the location changes.
Important:
• Device Control only supports 32-bit platforms.
• By default, Device Control is disabled on 32-bit versions of Windows Server 2003
and Windows Server 2008. Before enabling Device Control on these server
platforms, read the guidelines and best practices outlined in Client Services on page
13-6.
• The types of devices that OfficeScan can monitor depends on whether the Data
Protection license is activated. Data Protection is a separately licensed module and
must be activated before you can use it. For details about the Data Protection
license, see Data Protection License on page 9-4.
TABLE 8-1. Device Types
DEVICE TYPE
Storage Devices
DATA PROTECTION
ACTIVATED
DATA PROTECTION
NOT ACTIVATED
CD/DVD Monitored Monitored
Floppy disks Monitored Monitored
Network drives Monitored Monitored