System Requirements ..............................7 About Faronics ................................7 Installing Device Filter ............................8 Installing Using a Customized Device Filter Installer ....................8 Installing Using the Basic Device Filter Mac Installer ....................8 Installing via Apple Remote Desktop ...........................8 Installing Over Previous Versions ..........................8 Uninstalling Device Filter ..........................8 Using the Device Filter Preference Pane ......................9...
Bluetooth can now be managed to ensure that no unauthorized data transfers or connections take place. Device Filter Mac even offers seamless integration with Apple Remote Desktop (ARD), allowing administrators to deploy a customized device...
2. Follow the steps presented, and read and accept the license agreement. 3. Click Install and Device Filter Mac is installed on the computer. It will be accessible as a preference pane from within System Preferences.
Using the Device Filter Preference Pane To launch the Device Filter preference pane, open System Preferences and click the Device Filter icon listed under Other, as shown: Creating the First Device Filter User Unless you have specified a first user prior to installation from within the Device Filter Assistant, the first Device Filter user will have to be set up the first time the preference pane is accessed.
Start Tab The Start tab is where Device Filter can be enabled, and a number of other options including “stealth mode” and camera/CD/DVD control can be configured. Check the Enable Device Filter option to activate its controls. Once Device Filter is enabled, the changes in configuration are immediate; no reboot is needed for them to be applied.
FireWire Tab The FireWire tab configures how a FireWire (IEEE 1394) device can be mounted on a computer. To disallow FireWire devices from mounting or to choose whether devices can be mounted as either Read Only or Read/Write, select the preferred option. If a certain maximum size of FireWire device is required, input the preferred size (in GB) in the field provided.
USB Tab The USB tab configures how a USB device can be mounted on a computer. To disallow or allow USB devices from mounting or to choose whether devices can be mounted as either Read Only or Read/Write, select the preferred option. If a certain maximum size of USB device is required, input the preferred size (in MB) in the field provided.
Network Tab The Network tab configures what network settings and connections are enabled on the workstation. Choose from the following options to designate what network settings and connections will be enabled on a computer: • LAN Ethernet Wireless • Modem • •...
Admin Tab The Admin tab is for enabling specific authorization options for storage devices. To enable an otherwise disallowed device for one-time use only, check Enable One-Time Device Mounting. To enable an otherwise disallowed device for a specified amount of time, check Enable Time-limited access. If either the above options are configured, a dialog box will appear when a disallowed device is connected to the workstation.
Logging Tab The Logging tab allows administrators to view the activity of the specified devices/connections and to designate other logging options. If the Log Activity option is chosen on the FireWire, USB, and/or Network tabs, the Logging tab displays this activity. The logging data can be viewed either from within the tab or via a Device Filter activity log file.
Page 16
Device Filter logs information and groups it into columns as follows: Date displays the date of activity • • User displays the local user under whose account the activity took place Device displays the type of connection or name of device •...
Users Tab The Users tab is for adding, deleting, and editing users. Device Filter users are the administrators of the program and have unique usernames and passwords. There can be a maximum of four Device Filter users. The first user added is considered to be the administrative user of Device Filter. Only the first Device Filter user can add, edit, and/or delete users, and this user cannot be deleted.
Your default browser will load with a page stating if your version is up to date or if there is a more current one available for download. Follow the links as necessary. Alternativeely, you can check to see if you are running the most current version of Device Filter Mac via the checkForUpdates task in Apple Remote Desktop.
Appendix I: Device Filter Assistant & Customizing the Installer Device Filter Assistant can be used to create customized Device Filter installation packages and allows for the creation of global settings for a multiple workstation environment. Device Filter Assistant can also directly install Device Filter specific Saved Tasks into the Apple Remote Desktop (ARD) console on the current system.
Page 20
3. Check the box marked Yes, Install Tasks if you want the Device Filter Mac specific tasks to be exported into ARD on the current machine. A dialog may appear, stating that ARD or the ARD agent is currently running and giving the option to quit ARD immediately or at a later time.
Page 21
5. Enter the User Name and Password of the Device Filter Administrator to be created by the custom installer and used by Device Filter Mac’s Apple Remote Desktop tasks. Retype the password to verify it and click Continue. The Startup Control screen appears: The Startup Control screen is used to enable Device Filter and and a number of other options including “stealth mode”...
Page 22
The USB Control screen configures how a USB device can be mounted on a computer. To disallow or allow USB devices from mounting or to choose whether devices can be mounted as either Read Only or Read/Write, select the preferred option. If a certain maximum size of USB device is required, input the preferred size (in MB) in the field provided.
Page 23
8. The FireWire Control screen configures how a FireWire (IEEE 1394) device can be mounted on a computer. To disallow FireWire devices from mounting or to choose whether devices can be mounted as either Read Only or Read/Write, select the preferred option. If a certain maximum size of FireWire device is required, input the preferred size (in GB) in the field provided.
Page 24
10. The Administrator Options screen is for enabling specific authorization options. To enable an otherwise disallowed device for one-time use only, check Enable One-Time Device Mounting. To enable an otherwise disallowed device for a specified amount of time, check Enable Time- limited access.
Page 25
11. Click Choose and browse to the location of the Device Filter Mac installer package (Device Filter.pkg) located in the Device Filter Mac folder. Alternatively, drag the package file into the Choose dialog screen. Click Continue. The Where to Save screen appears: 12.
Device Filter Assistant can install tasks for use with Apple Remote Desktop. These tasks can be used as supplied or as a starting point for controlling Device Filter Mac with ARD. After the Assistant is run, the tasks are installed in ARD, as shown: NOTE: In ARD 2.2, the Device Filter-specific tasks are saved in the Saved Tasks folder, not in a named...
disables wireless ethernet connectivity on target computer(s) disableWireless prevents digital cameras from connecting to target computer(s) dontCameras prevents internal/external CD/DVD Read Only mounting on dontCDDVDMounting target computer(s) disables logging of FireWire connection activity dontlogFireWire disables logging of Network connection activity dontlogNetwork disables logging of USB connection activity dontlogUSB...
Otherwise, it will not have uninstall the sufficient permissions to uninstall all components of Device Filter Mac. If Device Filter is installed on a machine that is also running Deep Freeze, the Mac must be in a Thawed state for the uninstall to be successful.
Page 29
The following figure shows the task set to run as the current console user on a target enable computer: Each task must be edited to use a Device Filter user name and password for the target computer(s). In the above example, admin is the Device Filter user name and admin is the Device Filter password. The name and password may already be present in the task, depending on the settings that were specified in Device Filter Assistant.
Sample Command Line Script The Device Filter Mac tasks give network administrators increased flexibility when managing device usage on Device Filter Mac workstations. These tasks can be run with several different third-party enterprise management tools and/or central management solutions; this includes executing commands in Terminal while connected to a remote workstation via SSH.
Need help?
Do you have a question about the DEVICE FILTER MAC and is the answer not in the manual?
Questions and answers