1.3.4 Device Protection

Enable Device Protection

The MetaDefender Client device protection can be enabled by going to Settings → USB Mode → Driver installed → On.
This can only be enabled after the Client is installed.

images/download/attachments/39335807/usb_settings.png

Using Device Protection

Once installed, the MetaDefender Client will run as a Windows service, and will monitor the endpoint for any insertion of USB media or CD/DVD discs. Access to inserted devices will be blocked until they have been scanned by MetaDefender. The only way the device can be used without going through the MetaDefender Client is by uninstalling the MetaDefender Client.

When a USB or disc is inserted, MetaDefender Client will prompt the user to decide how to handle the device.

images/download/attachments/39335807/usb_block_warning.png

images/download/attachments/39335807/usb_options.png

The user can select one of three options

  1. Copy files from drive - The user can select which files on the drive they would like to scan

  2. Unlock drive - The entire drive will be scanned

  3. Copy files to drive - The user can select which files to copy to the USB drive without scanning

If the user chooses the 'Copy files from drive' option, they will be able to select which files on the media are to be scanned.

images/download/attachments/39335807/usb_browse.png

If the user chooses the 'Copy files to drive' option, they will be able to select which files on their system should be copied to the device. If this option is selected, the drive will not be scanned and the user will not have read access to the drive.

images/download/attachments/39335807/copy_to_drive_file_select.png

If a file already exists on the USB, the user will be prompted to choose whether or not they want to overwrite the file.

images/download/attachments/39335807/file_overwrite_notice.png

After all of the files have been processed a summary will be displayed to the user. If the 'Unlock drive' option was chosen and no threats were found, the drive will become accessible to the user.

images/download/attachments/39335807/device_unlocked.png

The user can choose to go to the directory of files that were scanned. If they chose the 'Unlock drive' option this will be the drive itself, but if they chose the "Copy files from drive' option this will be a directory on their desktop where files were copied.

images/download/attachments/39335807/image2017-2-20_15-40-25.png

They can also choose to save a report of the scan session in PDF, text, or CSV format.

images/download/attachments/39335807/image2017-2-20_15-41-21.png