Check Point HARMONY R81 - Page 253

Configuring a Write Action
R81 Harmony Endpoint Server Administration Guide|253
To configure a storage device Write Action:
1. Right-click a Write Access action and select Edit Properties.
The Removable Media Access window opens.
2. Optional: Select a different action from the list.
Click New to create a custom action.
3. Select one of these Storage device write access options:
n
Allow any data - Users can write all data types to storage devices.
n
Encrypt business related data - Users can write all data types to the storage
devices. Only Business Related data must be encrypted.
n
Encrypt all data - Users can write all data types to storage devices. All data must
be encrypted, including Non-Business Related data.
n
Block any data - Users cannot write to the storage devices.
4. Select one or more of these options:
n
Log device events - Select this option to create a log entry when a storage device
is attached (Event IDs 11 and 20 only).
Note: If you do not select the Log device events option in the Media Encryption &
Port Protection rule, log entries are not created even if the Audit device events
option is selected in this window.
n
Allow encryption - Select this option to let users encrypt storage devices. If this
option is cleared, no storage devices can be encrypted.
Click Additional Encryption Options to configure additional encryption settings as
necessary (see "Offline Access Actions" on page263 ).
n
Enable deletion - Select this option to let users delete files on devices with read
only permissions.
5. Configure these settings for User Overrides (UserCheck)
n
Allow user to override company policy - Lets users override the assigned policy
by sending written justification to an administrator.
Click Configure Message to create your own user message (see "Creating a
Custom User Message" on page255 ).
Note - The Allow user to override company policy option is not
supported for CD/DVD ROM devices.
6. If necessary, click Configure file types to define custom business related file types (see
"Configuring Business Related File Types" on the next page ).