Table of Contents 1 Introduction 1.1 About portable media device threats 1.2 GFI EndPointSecurity - the solution 1.3 Using this manual Getting Started Guide 1.4 Terms used in this manual 1.5 GFI EndPointSecurity licensing 2 About GFI EndPointSecurity 2.1 Introduction 2.2 Key features Group-based protection control Granular access control Scheduled deployment Access control Device whitelist and blacklist Power users Temporary access Status dashboard Active Directory deployment through MSI Agent management password Device discovery Logs browser Alerting Custom messages Database maintenance 2.3 Components of GFI EndPointSecurity GFI EndPointSecurity management console GFI EndPointSecurity agent 2.4 How GFI EndPointSecurity works - Deployment and monitoring 2.5 How GFI EndPointSecurity works - Device access 2.6 How GFI EndPointSecurity works - Temporary access 2.7 Supported device categories 2.8 Supported connectivity ports 2.9 Navigating the GFI EndPointSecurity management console 3 Creating new protection policies 3.1 Introduction 3.2 Using the Create Protection Policy wizard Step 1: Launching the Create Protection Policy wizard Step 2: Configuring policy name and establish settings inheritance Step 3: Configuring controlled categories and ports Step 4: Configuring global permissions Step 5: Configuring storage devices Step 6: Configuring logging and alerting options Step 7: Finalizing the wizard 4 Deploying protection policies 4.1 Introduction 4.2 Adding a target computer in the computers list 4.2.1 Adding a target computer 4.2.2 Configuring log on credentials 4.3 Assigning a protection policy 4.4 Deploying a protection policy 4.4.1 Deploy immediately 4.4.2 Schedule the deployment 4.4.3 Deploy through Active Directory 4.5 Verifying the deployment of a protection policy 4.5.1 Deployment history 4.5.2 Agents’ status 5 Monitoring device usage activity 5.1 Introduction 5.2 Statistics 5.2.1 Protection Status 5.2.2 Device Usage by Device Type 5.2.3 Device Usage by Connectivity Port 5.3 Activity 5.3.1 Activity Log Advanced Filtering 5.3.2 Logs Browser Creating event queries 6 Monitoring statuses 6.1 Introduction 6.2 General 6.2.1 Service Status 6.2.2 Database Backend Status 6.2.3 Alerting Status 6.2.4 General Status 6.2.5 Protection Status 6.2.6 Online Status 6.2.7 Agents’ Status 6.2.8 Device Usage 6.3 Agents 6.4 Deployment 6.4.1 Current Deployments 6.4.2 Queued Deployments 6.4.3 Scheduled Deployments 6.4.4 Deployment History 6.5 Statistics 7 Reporting 8 Discovering devices 8.1 Introduction 8.2 Device Scan 8.2.1 Running a Device Scan 8.2.2 Device Scan results Computers Devices list 8.2.3 Adding discovered devices in devices database 9 Customizing protection policies 9.1 Introduction 9.2 Configuring controlled device categories 9.3 Configuring controlled connectivity ports 9.4 Configuring power users 9.5 Configuring access permissions for device categories 9.6 Configuring access permissions for connectivity ports 9.7 Configuring access permissions for specific devices 9.8 Viewing access permissions 9.9 Configuring priorities for permissions 9.10 Configuring device blacklist 9.11 Configuring device whitelist 9.12 Configuring temporary access privileges 9.12.1 Requesting temporary access for a protected computer 9.12.2 Granting temporary access to a protected computer 9.13 Configuring file-type filters 9.14 Configuring security encryption 9.15 Configuring event logging 9.16 Configuring alerts 9.17 Setting a policy as the default policy 10 Customizing GFI EndPointSecurity 10.1 Introduction 10.2 Configuring auto discovery settings 10.3 Configuring the alerts administrator account 10.4 Configuring alerting options 10.5 Configuring alert recipients 10.5.1 Creating alert recipients 10.5.2 Editing alert recipient properties 10.5.3 Deleting alert recipients 10.6 Configuring groups of alert recipients 10.6.1 Creating groups of alert recipients 10.6.2 Editing group of alert recipients properties 10.6.3 Deleting groups of alert recipients 10.7 Configuring digest report 10.8 Configuring database backend 10.8.1 Connecting to an available SQL Server instance 10.8.2 Maintaining the database backend 10.9 Configuring user messages 10.10 Configuring advanced GFI EndPointSecurity options 11 Uninstalling GFI EndPointSecurity 11.1 Introduction 11.2 Uninstalling GFI EndPointSecurity agents 11.3 Uninstalling GFI EndPointSecurity application 12 Miscellaneous 12.1 Introduction 12.2 Entering your license key after installation 12.3 Checking for newer GFI EndPointSecurity versions 13 Troubleshooting 13.1 Introduction 13.2 Common Issues 13.3 Knowledge Base 13.4 Web Forum 13.5 Request technical support 13.6 Build notifications 13.7 Documentation 14 Glossary 15 Appendix 1 - Deployment error messages 15.1 Introduction 15.2 Deployment error messages
