Media Encryption Site Actions; Configuring Media Encryption Site Actions - Check Point HARMONY R81 Administration Manual

Media Encryption Site Actions

Site Actions control when to allow or prevent access to encrypted devices that were encrypted
by different Endpoint Security Management Servers. Each Endpoint Security Management
Server (known as a Site) has a Universally Unique Identifier (UUID). When you encrypt a
storage device on an Endpoint Security client, the Endpoint Security Management Server
UUID is written to the device. The Site action can prevent access to devices encrypted on a
different Endpoint Security Management Server or from another organization. The Site action
is enabled by default.
When a user attaches a storage device, Media Encryption & Port Protection makes sure that
the device matches UUID the Endpoint Security Management Server UUID or another trusted
Endpoint Security Management Server. If the UUIDs match, the user can enter a password to
access the device. If the UUID does not match, access to the device is blocked.
This table shows what occurs when you insert an encrypted device into a client that is
connected to an Endpoint Security Management Server the policy allows read- access. The
Endpoint Security Management Server that the device was encrypted with is referred to as
"the encrypting Endpoint Security Management Server".
The client is connected to:
The encrypting Endpoint Security
Management Server
A different trusted Endpoint Security
Management Server
A non-trusted Endpoint Security
Management Server

Configuring Media Encryption Site Actions

Media Encryption Site actions are part of the Media Encryption & Port Protection Policy. This
predefined action is enabled by default. You can change this action or create your own custom
actions.
Action Description
Allow Media Encryption Site (UUID) verification is enabled. Endpoint Security
access to clients can only access encrypted devices that were encrypted by the same
media Endpoint Security Management Server. If you add Endpoint Security
encrypted at Management Servers to the table below, they are considered trusted and
current site devices encrypted on those servers are allowed also.
only
Action
User can access automatically or enter a
password for access.
User can enter a password for access.
User cannot access the device.
R81 Harmony Endpoint Server Administration Guide | 274
Media Encryption Site Actions