USB tracking

Summary

Impero has an enhanced USB Tracking feature that allows you to track USB device usage across your network, and allow or block specific devices. In order to access this feature, select 'USB tracking' from the 'Admin' toolbar. This opens a new window to the 'Network devices' tab. 

Network devices

You can use this tab to view USB device usage across your network. On the left-hand side you see a list of the Computer Groups that are created in Impero; click on the ‘+’ icon to expand each Computer Group and view all the machines that belong to that group.

Click on a specific machine in the list to view, on the right-hand side, any USB devices that are used on that machine, as well as the serial number of the device, its size and whether or not the device is encrypted. You can click on the ‘+’  icon next to the USB Device Name in order to view which user used that particular device and the date and time at which it was used.

 There are a number of other options available to you from this tab. If you select any of the Computer Groups on the left-hand side of the window, there are four icons available above the 'Groups' panel.

Allowed devices only - This only allows access to USB devices that have been added to the 'Device Allow List' for this group. 

Allow all devices - This allows all USB devices to be used in this group. 

Allow only encrypted devices - This allows only encrypted USB devices for this group. 

Allow unencrypted devices - This allows the use of unencrypted USB devices in this group. 

If any of these restrictions are placed upon a group, and a user attempts to access a USB device that is not permitted, they will see an error message tell them that their access to that drive is denied.

 When you have selected a computer in the left-hand panel, you can select a specific USB device in the right-hand panel which then enables three further icons above the USB device list.

Add to allow list - Add the selected USB device to the list of allowed devices. The 'Device Allow List' then populates with the selected USB device. 

Remove from allow list - If the selected USB device has been added to the 'Device Allow List', click on this icon to remove it.

Delete - Remove the selected device from the list view. 

If a device within the list has been added to the allow list, you see the icon next to the device name change, so that you can quickly identify any machine in the list that has been added to the allow list. 

My devices

 Click on the 'My Devices' tab to see a list of the USB devices that have been used when logged in with your username. You can see the serial number of your device, the size and whether or not the device is encrypted. Click on the icon to view a list of the date and times at which the device was used. You can mark the check box next to your device name and then use the above icons to add your device to the 'Device Allow List' or remove it.

Device allow list

Select the 'Device Allow List' tab to view a list of the USB devices that have been permitted within the 'USB Tracking' feature. If a Console user then specifies 'Allowed devices only' for a group from within the 'Network Devices' tab; then only USB devices contained within this list is accessible on machines within that group. You can mark the check box next to a device name and then use the above icon to remove the device from the allow list.

You can also use Advanced Policies to enforce restrictions on USB device usage. In the Impero Console, select the group that you wish to restrict device usage on and use an Action policy to allow only allowed or encrypted devices. This allows you to enforce these restrictions on a scheduled basis if you wish.