Skip to main content
jklems
jklems
New Member
August 14, 2017
Question

FortiClient for controlling USB removable drive access

  • August 14, 2017
  • 1 reply
  • 12775 views

We have deployed Forticlient 5.6 and were hoping to be able to lock down USB thumbdrive access on a profile by profile basis. If you plug in a thumbdrive or any removable usb drive, the AV kicks in a scans it (if the profile is configured); but we dont see any way to lock down thumb drive access.  The Fortoclient is very feature rich, and does so many things, Anyone ?

1 reply

linfante
linfante
New Member
December 11, 2017

Any luck with this?

jklems
jklemsAuthor
New Member
December 11, 2017

Unfortunately, nothing.  I went to a Lunch and Learn in my city a few months ago, and mentioned it to the engineers.  They told me they would forward my request onward.  But nothing new yet.  

vikramsanker
vikramsanker
New Member
November 21, 2018

*Remember to backup the configuration before doing any changes."

 

I know its old post but this may help those who land on this page looking for an answer. FortiClient EMS has not come up with GUI yet. Meanwhile, there is a work around to do this. In FortiClient EMS, navigate to the "Endpoint Profiles" and select the required profile. Click "Edit" and do the following.

 

Navigate to "XML configuration" tab, click "Edit" and search for text "</antiexploit>". Paste the following code after "</antiexploit>".

 

<removable_media_access>

<enabled>1</enabled> <show_bubble_notifications>1</show_bubble_notifications> <action>Block</action> </removable_media_access>

 

Click "Test" and then "Save".  Your endpoints will now be updated with media access blocked. Hope this would help!!

 

Terms & ConditionsAccessibility statement