Data Loss Prevention

 View Only
  • 1.  DLP bluetooth prevention via Endpoint prevent

    Posted Aug 02, 2012 02:40 AM

    Hi Guys,

    Can we block data leakage through endpoint Bluetooth and infrared connectivity?

    Regards



  • 2.  RE: DLP bluetooth prevention via Endpoint prevent

    Posted Aug 02, 2012 06:57 AM

    Hi Atif,

    The Endpoint Agent doesn't support Native Bluetooth monitoring and prevention.

    The only reason Bluetooth over USB is supported is because Bluetooth devices expose themselves as USB devices and the OS does not distinguish between them. So in this case it will behave as standard USB device.

     

    Regarsd

    Kishorilal



  • 3.  RE: DLP bluetooth prevention via Endpoint prevent

    Posted Aug 02, 2012 02:09 PM

    But could this be handled by the application monitoring portion of the Endpoint?  Does Bluetooth use a certain application to transfer files over and if so could you monitor that w/ the Endpoint agent?



  • 4.  RE: DLP bluetooth prevention via Endpoint prevent

    Broadcom Employee
    Posted Oct 30, 2012 08:35 PM

    fsquirt.exe is used by bluetooth, and, you can add fsquirt.ext to the application list to monitor the file transfer by bluetooth.



  • 5.  RE: DLP bluetooth prevention via Endpoint prevent

    Posted Dec 05, 2012 07:27 AM

    Plaese refer below

    Device control, as its name suggests, controls what devices can be used on a given computer. So if you want to disallow CD burning by a government security analyst with access to secret documents, you can do so. Symantec Endpoint Encryption (SEE) Device Control allows this to be done by policy, across the organization. Permissions can be set by group or per individual user. SEE Device Control could even have allowed Pfc. Manning to listen to Lady Gaga MP3 files, but prevented him from copying files of any type to the CD

    https://www-secure.symantec.com/connect/blogs/stopping-wikileaks-scenario-encryption-device-control-and-endpoint-dlp



  • 6.  RE: DLP bluetooth prevention via Endpoint prevent
    Best Answer

    Posted Dec 06, 2012 01:03 AM

    Hi Atif,

     


    The Endpoint Agent doesn't support Native Bluetooth monitoring and prevention.The only reason Bluetooth over USB is supported is because Bluetooth devices expose themselves as USB devices and the OS does not distinguish between them. So in this case it will behave as standard USB device.