Security – Looking for a way to audit/monitor removable media on a Mac

mac-osxSecurityusb

We have a client who's requiring that we implement dataloss prevention on workstations that are accessing their project's data. If Alice attaches removable media (USB, FireWire, CD, DVD) to her computer, we need an audit report that she copied files X, Y, Z to/from media. We have a 100% Mac user base.

I've looked at endpoint protector products from CoSoSys and Sophos, but neither supports removable media control on the Mac. I'm looking at McAfee right now, but their product literature is making my head spin.

Can anybody recommend a product to do this? Or are we looking at building something from scratch?

Thanks in advance…

Best Answer

Hmm.. Are you sure CoSoSys doesn't support removable media control on the Mac? It completely seems like they do: http://www.cososys.com/software/device_management_for_Mac_OS_X.html:

Device Management for Mac OS X

  • Centralized Device Management / Device Whitelist
    • For Mac OS X the use of USB storage devices, FireWire devices and CD/DVD is controlled.
  • Support for Mac OS X and Windows (XP, Vista, 7)
  • File Tracing - Control your Data Flow (for Endpoint Protector)
  • Offline Temporary Password
  • Enforcement of your Device use Policy
  • Reporting and Analysis
    • My Endpoint Protector offers powerful reporting and analysis tools that lets you analyse all activity (e.g. devices connected, files transferred, etc) at the endpoint.


What is it missing from your requirements?

Related Topic