CSA v6.0 custom policy

Gerard Gacusan · ‎07-27-2011

The situation is that - I'm wanting to implement a "Do not Save File Locally in their Hard Drive" or "Do Not Print" Policy in an end-host PC with CSA agent enabled device. It is relevant to the built-in "Blocked Writing Files to a USB or External drive" policy in CSA.

Any idea if possible?

Thanks in advance ..

mwinnett · ‎08-11-2011

Gerard

For local hard drives you can use the variable "@fixed" to reference them. I dont find the policy that you are refering to. However, you can define a rule that stops people writing to "@fixed:\**\*".

For the printing, if you are refering to network printing then a NAC rule can be defined for this.If you go to policy "Security - Data Loss - Prevent leakage" you can copy this to your own rule module and modify it to suit your requirements. I haven't been able to test this.

Matthew