Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual page 102

Dialup: Controls modem connectivity by location. This option is not available when
configuring communication hardware settings on a global basis using the Global Policy
Settings tab. If you want to limit access to specific modems, set this option to Allow All
Access and then add the approved modems to the Approved Dial-Up Adapters list.
Wired: Controls LAN card connectivity by location. This option is not available when
configuring communication hardware settings on a global basis using the Global Policy
Settings tab. If you want to limit access to specific wired adapters, set this option to All All
Access and then add the approved adapters to the Approved Wired Adapters list.
2 (Optional) If you selected Allow All Access for the Dialup or Wired settings and you want to
limit the adapters that are allowed, add the approved adapters to the appropriate list (Approved
Wired Adapters or Approved Dialup Adapters.
Partial adapter names are permitted. Adapter names are limited to 50 characters and are case
sensitive. Only the adapters included in the list are allowed; all other adapters are blocked.
3 (Optional) If you have enabled Wi-Fi (see
limit the wireless adapters that are allowed, add the approved adapters to the Approved Wireless
Adapters list.
Partial adapter names are permitted. Adapter names are limited to 50 characters and are case
sensitive. Only the adapters included in the list are allowed; all other adapters are blocked.
If the endpoint is in a location that defines only a Wi-Fi access point's SSID as the network
identification(see
to that location before disabling the unauthorized adapter. A password override should be used
to provide a manual location switch if this occurs.
The Endpoint Security Client receives notification whenever a network device is installed in the
system and determines if the device is approved. If it is not approved, the solution disables the
device driver, which renders this new device unusable, and notifies the user of the situation.
When a new unapproved adapter first installs its drivers on the endpoint (via PCMCIA or USB), the
adapter displays as enabled in Windows Device Manager until the system is rebooted, though all
network connectivity is blocked.
Storage Device Control
Storage device controls set the default storage device settings for the policy, where all external file
storage devices are either allowed to read/write files, function in a read-only state, or be fully
disabled. When disabled, these devices are rendered unable to retrieve any data from the endpoint;
while the hard drive and all network drives remain accessible and operational.
NOTE: You can set the storage device controls globally on the Global Policy Settings tab or for
individual locations on the Locations tab.
To access this control:
To set the storage device controls for a location, click the Locations tab, expand the desired location
in the tree, then click Storage Device Control.
or
To set the storage device controls on a global basis, click the Global Policy Settings tab, expand
Global Settings in the tree, then click Storage Device Control. For more information, see
Device Control" on page
102 ZENworks Endpoint Security Management Administration Guide
"Wi-Fi Management" on page
"Wi-Fi Management" on page
85.
104) and you want to
104) , the Endpoint Security Client switches
"Storage