Previous Topic: Encrypting Files

Next Topic: Exempt PGP® Portable Devices

Specify Which Removable Devices To Monitor

Before you can set up policy triggers to encrypt sensitive files, you must first edit the machine policy to specify which devices you want to detect (or exempt).

To specify which removable devices to monitor

  1. In the Common Client machine policy, specify which removable devices you want to control. Go to this folder:

    Client File System Agent, Data In Use Protection, Removable Devices.

  2. Edit the settings as required. Pay particular attention to these settings:
    Default Handling

    The setting controls attempts to copy files to unlisted devices (that is, any device not in the Special Device List). The available actions are exactly the same as the handling for special devices (see below).

    Special Device List

    This is a list of removable devices that require specific handling by the CFSA. For example, you can identify the devices you want the CFSA to control or the ones you want it to ignore.

    Handling for Special Devices

    This setting determines how the CFSA handles files being copied to devices in the Special Device List. To encrypt sensitive files, you must set this to 'Apply User Policy'.

    Note: Full instructions for configuring the CFSA are in the Deployment Guide. Search the index for 'Client File System Agent'.