XDR USB Activities

JahidAliyev — Fri, 26 Apr 2024 12:19:38 GMT

Hello,

I have a few questions and I would be happy If you answer them.

Questions:

In device control tab of Cortex XDR, I can easily turn DIsk Drives to read mode. It is okey and working when I am doing this. I cannot delete any file, write or format the USB flash drive since I have read access only. But If I use rufus to format the flash drive, It works. I mean Rufus can delete the partitions but cannot write new partition to it so spoil the drive. What can be done in this matter?
I need to block bluetooth activities in two ways: a) blocking file transfers only; b) blocking connection to bluetooth. How can I do this in Cortex XDR?
In CD-ROM drives, there is only 2 option: allow or block. There is no option like "read only". What if I want to configure in a way that user can read the CD-ROM drive but cannot write to it anything?

Thanks in advance

Re: XDR USB Activities

nsinghvirk — Fri, 03 May 2024 02:10:25 GMT

Hello @JahidAliyev

Thanks for reaching out on LiveCommunity!

Please find below response to your queries.

1. Idly once you set device control settings to read only you should not be able to write/format to it. As confirmed by you that Rufus was able to delete the partitions but this makes the disk unusable anyway. However to investigate this further log analysis is required hence please open a support case.

2. Currently device control settings do not support blocking bluetooth devices.

3. Currently CD ROM settings only have allow and block mode. Read only mode is not supported.

topic XDR USB Activities in Cortex XDR Discussions

XDR USB Activities

Re: XDR USB Activities