Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Bronze

CSA file copying control

Hey All,

We're in the process of doing some work on data leak protection with CSA 5.2. I have copy and paste protection working without and issue. How do you prevent a user from printing specified files or copying the file from one folder to another? Copy and paste protection only handles the copying of data within an application. As for printing I'm at a total loss how to prevent that within an application when sensitive data is open. Any help would be appreciated.

-Mike

http://cs-mars.blogspot.com

2 REPLIES
Blue

Re: CSA file copying control

Hi Michael, I have a couple of thoughts, but not much experience with this.

You might be able deny access to the print spooler when the application is running and use a write deny rule to restrict file\folder copies.

If you are able to separate the application printing processes, you might be able to allow other apps to print, but lock this one down.

Tom

Re: CSA file copying control

You could create an application investigation rule for that particular application and try to do the things you don't wan't it to be abl to. This would give you the events need to block it.

160
Views
0
Helpful
2
Replies
CreatePlease to create content