Home

File

1. A COA COD j f l 7 y 4 F r onics J DEVICEFLTERMHAC User Guide ESSENTIAL Connection Control This page intentionally left blank Foronics DEWICEFILTERMAC Technical Support Every effort has been made to design this software for ease of use and to be problem free If problems are encountered contact Technical Support Email support faronics com Phone 800 943 6422 or 604 637 3333 Hours 7 00 am to 5 00pm Pacific Time Contact Information Web www faronics com Email sales faronics com Phone 800 943 6422 or 604 637 3333 Fax 800 943 6488 or 604 637 8188 Hours 7 00 am to 5 00pm Pacific Time Address Faronics Technologies USA Inc Faronics Pte Ltd 100 W San Fernando Street Suite 465 20 Cecil Street 104 01 San Jose CA 95113 Equity Way 049705 USA Singapore Faronics Corporation Headquarters Faronics EMEA 1400 609 Granville Street Bracknell England PO Box 10362 Pacific Centre 8 The Courtyard Eastern Road Vancouver BC V7Y 1G5 Bracknell Berkshire Canada RG12 2XB Europe Last modified August 2008 1999 2008 Faronics Corporation All rights reserved Faronics Deep Freeze Faronics Core Console Faronics Anti Executable Faronics Device Filter Faronics Power Save Faronics Insight Faronics System Profiler and WINSelect are trademarks and or registered trademarks of Faronics Corporation All other company and product names are trademarks of
2. v Enable Device Filter Hide Enabled Icon in menu bar Hide Disabled Icon in menu bar v Always allow Cameras v Always allow Video Cameras M Allow CD DVD Read Only Mi Allow CD DVD Write Choose the location to which log data will be written No log path chosen Choose GoBack Continue 6 The Startup Control screen is used to enable Device Filter and and a number of other options including stealth mode and camera CD DVD control can be configured Check the Enable Device Filter option to activate its controls Stealth Mode To hide the visual presence of Device Filter from the user check the Hide Enabled Icon in menu bar and or Hide Disabled Icon in menu bar options Camera and CD DVD Control To allow cameras or video cameras check the preferred option To allow users to access CDs and DVDs in either Read Only or Read Write modes check the preferred option These options refer to both internal and external CD DVD drives If the activity of devices and connections is to be logged click Choose enter an activity log file name and browse to the preferred save location activity log file location is specified that does not exist on the workstation logging will be disabled upon install and a warning dialog box will prompt the user to enter a new location for this file 1 Remember to choose a location which exists on the target machine s If an Also if you are running Device F
3. lt parameterN gt is a list of parameters if necessary Faronics 27 Foronics DEVWICEFILTERMAC Examples l status task Library Application Support Faronics DeviceFilter CLI admin password status Where Library Application Support Faronics DeviceFilter CLIisthe installation location of the program admin is the configured user name password is the configured password and status is the desired command setUSBOptions task Library Application Support Faronics DeviceFilter CLI admin password setUSBOptions 0 3 size Where Library Application Support Faronics DeviceFilter CLIisthe installation location of the program admin is the configured user name password is the configured password setUSBOptions is the desired command 0 3 corresponding to the desired option found on the USB tab of the preference pane 0 Disallow Mounting 1 Allow Mounting Read Only 2 Allow Mounting Read Write 3 Allow Mounting Read Write if capacity less than is the first parameter and size corresponding to the desired maximum size of USB device in MB if 3 is chosen as the first parameter is the second parameter The uninstall task must run as root on the target computer Otherwise it will not have A the sufficient permissions to uninstall all components of Device Filter Mac If Device Filter is installed on a machine that is also running Deep Freeze the Mac must be in a Thawed state for the uninstall to be s
4. Allow Mounting Read Write USB Mount Options 4llow Mounting Read Write Sample Command Line Script 30 The Device Filter Mac tasks give network administrators increased flexibility when managing device usage on Device Filter Mac workstations These tasks can be run with several different third party enterprise management tools and or central management solutions this includes executing commands in Terminal while connected to a remote workstation via SSH A sample script using the enable command is shown below Library Application Support Faronics DeviceFilter CLI admin password enable A sample script using the setUSBOptions command is shown below Library Application Support Faronics DeviceFilter CLI admin password setUSBOptions 3 512 In these examples admin is the name of a valid Device Filter user and password is that users password for the second example script the number 3 is the choice to allow a USB device to mount Read Write if the capacity is below a certain maximum size and 512 is the chosen maximum size in MB These sample scripts can be modified to run any task listed in the Task table on pages 26 and 27 For onicS
5. Run command as 0 Current console user on target computer User Command results v Display all output Status Protected Mac 1 idle 18m Protected Mac 2 Old Version 2 2 Protected Mac 3 Available 3 computers Each task must be edited to use a Device Filter user name and password for the target computer s In the above example admin is the Device Filter user name and admin is the Device Filter password The name and password may already be present in the task depending on the settings that were specified in Device Filter Assistant For onicS 29 Foronics DEVWICEFILTERMAC ARD Sample Output The following figure shows the sample output from the status function The Display all output checkbox must be selected in the Apple Remote Desktop Edit Task window in order to show the target s status a AeA DeviceFilter status 18 10 06 5 02 PM co a 9 ia Print Export Enabled TRUE Expired FALSE Number OF Users 1 Admin Can Authorize For Time FALSE Enable Bluetooth FALSE Enable Internal CO amp OWO TRUE Enable IR Port FALSE Enable Landline Lan TRUE Enable Modem FALSE Enable Wireless Internet FALSE Always Allow Cameras TRUE ls Allow Video Cameras TRUE Always Allow CD amp OWO TRUE Hide Disable Icon FALSE Hide Enabled Icon FALSE Log Firewire FALSE Log Network FALSE Log USB FALSE Enable One time Device Mounting FALSE Firewire Mount Options
6. Device Filter Start FireWire USB Network Admin Logging DF User Name a min F Add Delete Edit ty Click the lock to prevent further changes Adding a User To add a user click Add In the dialog that appears enter the new users name and password and confirm the password Click OK and the new user appears in the Users tab Deleting a User To delete a user select the preferred user name and click Delete The first user added is considered to be an administrative user of Device Filter Only this admin user can add edit and or delete users so this user cannot be deleted Editing a User To edit a user click Edit In the dialog that appears enter the new username and or password and confirm the password Click OK and the user information is updated F ronIics 17 Foronil DEVICEFILTERMACG Device Filter Icons When Device Filter is installed the Device Filter icon will appear in the menu bar The Enabled icon i indicates that Device Filter control is active The Disabled icon Y indicates that Device Filter control is deactivated Checking for Software Updates To check if the installed version of Device Filter is the most current one click the y icon and choose Check for Updates Your default browser will load with a page stating if your version is up to date or if there is a more current one available for download Follow the links as nece
7. are not affected by Device Filter controls USB CD DVD drives are controlled from the corresponding options on the Start tab 12 For onicS Foronics DEVICEFILTERMAC Network Tab The Network tab configures what network settings and connections are enabled on the workstation 800 Device Filter gt Showa Version 1 00 071 0046 Start FireWire USB Network Admin Logging Users El Enable LAN Ethernet Al Enable Wireless Ethernet Enable Modem wi Enable Bluetooth Mi Enable IR Port Log Activity p E Click the lock to prevent further changes Choose from the following options to designate what network settings and connections will be enabled on a computer e LAN Ethernet e Wireless e Modem e Bluetooth modem only e IR Infra red Port if this option is chosen a restart is required for it to become enabled disabled To log Network connection activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and the activity log file For onicS 13 Foronics DEVWICEFILTERMAC Admin Tab The Admin tab is for enabling specific authorization options for storage devices ean Device Filter a Version 1 00 070 0041 Start FireWire USE Network Adm Logging Users Enable One Time Device Mounting Enable Time limited access ty ma Click the lock to prevent further changes To enable an otherwise disallowe
8. custom client installer was successfully created The Device Filter tasks were successfully installed 13 Click Quitto close the Device Filter Mac Assistant Far ONICS 25 Foronics DEVICEFILTERMAC Appendix ll Apple Remote Desktop Integration Tasks Device Filter Assistant can install tasks for use with Apple Remote Desktop These tasks can be used as supplied or as a starting point for controlling Device Filter Mac with ARD After the Assistant is run the tasks are installed in ARD as shown 009 Remote Desktop S mai fm EQ Observe Control Curtain Copy Install UNIX Reports Spotlight Filter t All Computers Current Status Current Application Current User IP Address Mac OS Version ARD E Scanner Device Filter E DeviceFilter addUser E DeviceFilter allowCameras E DeviceFilter allowCDDVDMo E DeviceFilter allowVideoCameras E DeviceFilter deleteUser E DeviceFilter disable E DeviceFilter disableBluetooth E DeviceFilter disablelnternalC E DeviceFilter disablelR E DeviceFilter disableLANEthernet E DeviceFilter disableModem E DeviceFilter disableOneTime DeviceFilter disableWireless E DeviceFilter dontCameras E DeviceFilter dontCDDVDMo E DeviceFilter dontlogFireWire E DeviceFilter dontlogNetwork E DeviceFilter dontlogUSB E DeviceFilter dontVideoCameras E DeviceFilter editUser E DeviceFilter enable E DeviceFilter enableBluetooth E DeviceFilter enablelnternalC E DeviceFilter enable
9. et OR SON E A E TAA GA BEAR BA A E 18 Appendix I Device Filter Assistant amp Customizing the Installer 00 0000 000000000 000 eee 000000n00n0 000 19 Appendix II Apple Remote Desktop Integration Tasks sccccccscsssssssssssssscceeessssssssssesseccseeesesssssssees 26 Ee AE Gh A E E E ina AAA i a lan a 27 Adding Targeted Computers to the Task Listaiscissrririiiireninicrninosiincnnisin iiinn akaiita ania abeat 28 ARD Ee VO a a E E A E E E UT T sia seen 30 Sample Command Line Seri Pissis T a a SR RN 30 F ronIics 5 This page intentionally left blank Foronil DEVICEFILTERMACG Device Filter Overview About Device Filter Unregulated connectivity can cause a multitude of security productivity and policy challenges that consume valuable computer and human resources Device Filter Mac solves this problem by enabling system administrators to effectively control device connectivity at an enterprise level Anything from an iPod to portable applications or a modem connected via Bluetooth can now be managed to ensure that no unauthorized data transfers or connections take place Device Filter Mac even offers seamless integration with Apple Remote Desktop ARD allowing administrators to deploy a customized device connectivity configuration package to single or multiple computers About Apple Remote Desktop ARD Apple Remote Desktop is Apple Computers complete desktop management solution for Mac OS X Faronics d
10. 147 K 06 10 17 tessa UNKNOWN WRITE 2097151 K 06 10 17 tessa MY USB KEY READ 29360114 K 06 10 17 tessa MY USB KEY WRITE 6291453 K Choose the location to which log data will be written fUsers tessa Desktop DFilLog txt SP Sa Condense Choose CE rl ma Click the lock to prevent further changes To combine entries which have logged the same date action user and device thus making the log file smaller click Condense Note Condensing the activity log file can be done on an ongoing basis if desired New data will be incorporated into the condensed log file log file A new empty activity log file with the previously specified name will be 1 To clear old data from the Logging window either erase or rename the existing activity created and the Logging window will display the activity that is logged in this new file 16 Far OMICS Foronics DEVICEFILTERMAC Users Tab The Users tab is for adding deleting and editing users Device Filter users are the administrators of the program and have unique usernames and passwords There can be a maximum of four Device Filter users The first user added is considered to be the administrative user of Device Filter Only the first Device Filter user can add edit and or delete users and this user cannot be deleted Device Filter users must input their usernames and passwords to unlock the preference pane and alter the settings of the program e ao
11. Administrator Options screen is for enabling specific authorization options To enable an otherwise disallowed device for one time use only check Enable One Time Device Mounting To enable an otherwise disallowed device for a specified amount of time check Enable Time limited access Click Continue The Choose Device Filter Installer screen appears OAM Device Filter Assistant Choose Device Filter Installer Choose the Device Filter installer package to use as the basis for the custom client installer No installer chosen 24 ForonicS Foronics DEVICEFILTERMAC 11 Click Choose and browse to the location of the Device Filter Mac installer package Device Filter pkg located in the Device Filter Mac folder Alternatively drag the package file into the Choose dialog screen Click Continue The Where to Save screen appears 090 Device Filter Assistant Where to Save Choose where to save the custom client installer No location chosen Choose GoBack Continue 12 Click Choose A standard Save dialog appears Browse to a location to save the custom client installer and select it Alternatively drag and drop the preferred save location into the Choose dialog screen Click Continue The final screen appears stating that the custom client installer was successfully created and that the Device Filter tasks were installed into ARD 000 Device Filter Assistant Done The
12. d a first user prior to installation from within the Device Filter Assistant the first Device Filter user will have to be set up the first time the preference pane is accessed To configure Device Filter click the lock icon to unlock the preference pane When the changes are complete click the icon again to lock the screen and prevent any other changes When the lock is clicked for the first time the following dialog appears User Name admin Password esses F _ Verify Enter a User Name and Password verify the password and click OK The first user added is considered to be the administrative user of Device Filter Only the first Device Filter user can add edit and or delete users and this user cannot be deleted Up to three other Device Filter users can be created on the Users tab These users are the Device Filter Administrators Device Filter users must input their usernames and passwords to unlock the preference pane and alter the settings of the program Faronics 9 Foronics DEVWICEFILTERMAC 10 Start Tab The Start tab is where Device Filter can be enabled and a number of other options including stealth mode and camera CD DVD control can be configured ean Device Filter a gt Show al fs N Version 1 00 070 0041 FireWire USB Network Admin Logging Users wi Enable Device Filter Hide Enabled Icon in menu bar Hide Disabled Icon in menu ba
13. d device for one time use only check Enable One Time Device Mounting To enable an otherwise disallowed device for a specified amount of time check Enable Time limited access If either the above options are configured a dialog box will appear when a disallowed device is connected to the workstation The user must enter a Device Filter username and password to continue 000 FAN A device has been mounted Do you wish to authorize this device _ Authorize Once Authorize for a fixed time minutes User Name f Password For timed access a number of minutes must be entered into the corresponding field to authorize the device A warning will appear to the user two minutes before the timed access is set to expire 14 ForonicS Foronics DEVICEFILTERMAC Logging Tab The Logging tab allows administrators to view the activity of the specified devices connections and to designate other logging options If the Log Activity option is chosen on the FireWire USB and or Network tabs the Logging tab displays this activity ean Device Filter Version 1 00 070 0041 Date aul User Device Action Amount Choose the location to which log data will be written Condense Choose Ry El Click the lock to prevent further changes The logging data can be viewed either from within the tab or via a Device Filter activity log file To choose the name of the activ
14. gh this is not necessary Uninstalling Device Filter To uninstall Device Filter click the lock icon to unlock the preference pane A Device Filter user name and password will be required Click the w icon and select Uninstall from the action menu Follow the steps presented a restart is required to complete the uninstall process If Device Filter is installed on a machine that is also running Deep Freeze the Mac must be in a Thawed state for the uninstall to be successful If Deep Freeze is in a Frozen state Device Filter will refuse the uninstall command and prompt the user with the reason 8 ForonicS Foronics DEVICEFILTERMAC Using the Device Filter Preference Pane To launch the Device Filter preference pane open System Preferences and click the Device Filter icon listed under Other as shown eam System Preferences l i a show all a Personal File oo pamm p gt ue i amp Appearance Dashboard amp Desktop amp Dock International Security Spotlight Expose Screen Saver Hardware an a ae ir aw i Fi i CDs DVDs Displays Energy Keyboard amp Print amp Fax Sound Saver Mouse Internet amp Network Mac Network QuickTime Sharing System ai je G 2 Accounts Date amp Time Software Speech Startup Disk Universal Update Access Other Device Filter Creating the First Device Filter User Unless you have specifie
15. ilter on a computer that has Deep Freeze installed the activity log file must be saved on a Thawed partition or the log data will not be retained after restarts Click Continue The USB Control screen appears ForonicS 21 Foronics DEVWICEFILTERMAC Device Filter Assistant USB Control O Disallow Mounting Allow Mounting Read Only Allow Mounting Read Write Allow Mounting Read Write if capacity less than Log Activity GoBack Continue 7 The USB Control screen configures how a USB device can be mounted on a computer To disallow or allow USB devices from mounting or to choose whether devices can be mounted as either Read Only or Read Write select the preferred option If a certain maximum size of USB device is required input the preferred size in MB in the field provided To monitor USB activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab Click Continue The Fire Wire Control screen appears Device Filter Assistant FireWire Control Disallow Mounting Allow Mounting Read Only Allow Mounting Read Write Allow Mounting Read Write if capacity less than Log Activity a GoBack Continue 22 ForonicS ForonicS Foronil DEVICEFILTERMACG The FireWire Control screen configures how a FireWire IEEE 1394 de
16. ing or to choose whether devices can be mounted as either Read Only or Read Write select the preferred option If a certain maximum size of FireWire device is required input the preferred size in GB in the field provided To log FireWire device activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab FireWire disks that are not ejected properly will not mount as Read Only FireWire CD DVD drives are controlled from the corresponding options on the Start tab For onicS 11 Foronil DEVICEFILTERMACG USB Tab The USB tab configures how a USB device can be mounted on a computer Device Filter Assistant USE Control Disallow Mounting Allow Mounting Read Only fe Allow Mounting Read Write Allow Mounting Read Write if capacity less than Log Activity Go Back Continue To disallow or allow USB devices from mounting or to choose whether devices can be mounted as either Read Only or Read Write select the preferred option If a certain maximum size of USB device is required input the preferred size in MB in the field provided To log USB activity traffic check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab USB peripherals such as keyboards and mice
17. ity log file and the location where the file will be written if this was not pre determined by using the Device Filter Assistant click Choose enter a file name and browse to the preferred save location If an activity log file location is designated with the Device Filter Assistant and that location does not exist on the workstation logging will be disabled upon install and a warning dialog box will prompt the user to enter a new location for this file Also if you are running Device Filter on a computer that has Deep Freeze installed the activity log file must be saved on a Thawed partition or the log data will not be retained after restarts For onicS 15 Foronics DEVWICEFILTERMAC Device Filter logs information and groups it into columns as follows e Date displays the date of activity e User displays the local user under whose account the activity took place e Device displays the type of connection or name of device e Action displays whether the action was incoming outgoing Read or Write e Amount displays the amount of data activity in kilobytes K ean Device Filter Show All G Version 1 00 070 0042 Start FireWire USB Network Admin Logging Users Date i User Device Action Amount 06 10 17 tessa Ethernet OUT 20493 K 06 10 17 tessa Ethernet IN 554255 K 06 10 17 tessa UNKNOWN READ 4194302 K 06 10 17 tessa DAVE S KEY READ 2097151 K 06 10 17 tessa DAVE S KEY WRITE 2097
18. lR E DeviceFilter enableLANEthernet E DeviceFilter enableModem E DeviceFilter enableOneTime E DeviceFilter enableWireless E DeviceFilter hideDisabledicon E DeviceFilter hideEnabledicon E DeviceFilter logFireWire v No computers NOTE In ARD 2 2 the Device Filter specific tasks are saved in the Saved Tasks folder not in a named folder The following table gives a description of the function of each task Each task can also be configured in the Device Filter Mac preference pane except for status Task addUser adds a new user to target computer s allowCameras allows digital cameras to be connected to target computer s al lowCDDVDMounting allows internal external CD DVDs Read Only to be mounted to target computer s allowVideoCameras allows video cameras to be connected to target computer s deleteUser deletes a user from target computer s disable disables Device Filter protection on target computer s disableAdminCanAuthorizeForTime disables optional timed access device authorization disableBluetooth disables Bluetooth modem connectivity on target computer s disableCDDVD disables internal external CD DVD Read Write on target computer s disableIR disables infra red port connectivity on target computer s disableLANEthernet disables LAN ethernet connectivity on target computer s disableModem disables modem connectivity on target computer s disableOneTimeDeviceMounting disables optional one time device authori
19. ntinue For onicS 19 Foronics DEVICEFILTERMAC 3 Check the box marked Yes Install Tasks if you want the Device Filter Mac specific tasks to be exported into ARD on the current machine A dialog may appear stating that ARD or the ARD agent is currently running and giving the option to quit ARD immediately or at a later time The Device Filter tasks will only be installed if ARD is not running Choose the preferred action and click Continue The Device Filter Custom Installer screen appears 0 eB0 Device Filter Assistant Device Filter Custom Installer Do you want to create a custom client installer for Device Filter v Yes create a custom installer 4 To create a custom client installer check Yes create a custom installer and click Continue The Device Filter Administrator screen appears 000 Device Filter Assistant Device Filter Administrator Enter the Device Filter Administrator name and password to use in the custom client installer and Apple Remote Desktop tasks User Name Password Verify Password 20 ForonicS Foronics DEVICEFILTERMAC 5 Enter the User Name and Password of the Device Filter Administrator to be created by the custom installer and used by Device Filter Macs Apple Remote Desktop tasks Retype the password to verify it and click Continue The Startup Control screen appears 000 Device Filter Assistant Startup Control
20. oes not provide sales or technical support information for Apple Remote Desktop More information regarding ARD can be found at http www apple com remotedesktop Command Line Control Capability Tasks referred to in Appendix II for use with ARD can also be used in other third party command line control programs System Requirements Device Filter requires Mac OS X v10 3 0 and up Device Filter is a Universal application Intel and PPC compatible ARD integration requires Apple Remote Desktop version 2 2 or later A minimum of 256 MB RAM is recommended About Faronics Faronics delivers innovative solutions that help manage simplify and secure complex IT environments Our products ensure 100 workstation availability and have dramatically impacted the day to day lives of thousands of information technology professionals Fueled by a customer centric focus Faronics technology innovations benefit educational institutions healthcare facilities libraries government organizations and corporations Faronics award winning Deep Freeze preserves computer configurations providing total system consistency while allowing users complete unrestricted workstation access Faronics Anti Executable prevents unauthorized software from being installed or run and Power Save lowers energy costs with intelligent energy management Incorporated in 1996 Faronics has an office in the USA and Canada ForonicS Foronil DEVICEFILTERMACG Installing De
21. r rd Always allow Cameras Mi Always allow Video Cameras hf Allow CD DVD Read Only i Allow CD DVD Write CE El Click the lock to prevent further changes Check the Enable Device Filter option to activate its controls needed for them to be applied The only exception is the enabling disabling of the infra 1 Once Device Filter is enabled the changes in configuration are immediate no reboot is red IR port This change does require a restart to take effect Stealth Mode To hide the visual presence of Device Filter from the user check the Hide Enabled Icon in menu bar and or Hide Disabled Icon in menu bar options Camera and CD DVD Control To allow cameras or video cameras check the preferred option To allow users to access CDs and DVDs in either Read Only or Read Write modes check the preferred option These options refer to both internal and external CD DVD drives For onicS Foronics DEVICEFILTERMAC FireWire Tab The FireWire tab configures how a FireWire IEEE 1394 device can be mounted on a computer Boao Device Filter Show All C Version 1 00 071 0046 USE Network Admin Logging Users Disallow Mounting Allow Mounting Read Only Allow Mounting Read Write Allow Mounting Read Write if capacity less than 0 rd Log Activity A ma Click the lock to prevent further changes To disallow FireWire devices from mount
22. ssary Alternativeely you can check to see if you are running the most current version of Device Filter Mac via the checkForUpdates task in Apple Remote Desktop 18 ForonicS Foronics DEVICEFILTERMAC Appendix I Device Filter Assistant amp Customizing the Installer Device Filter Assistant can be used to create customized Device Filter installation packages and allows for the creation of global settings for a multiple workstation environment Device Filter Assistant can also directly install Device Filter specific Saved Tasks into the Apple Remote Desktop ARD console on the current system ARD tasks are not part of the customized Device Filter installation package Neither ARD nor the ARD agent can be running in order for the task installation to be successful To run Device Filter Assistant complete the following steps l Double click the program icon to open Device Filter Assistant The Introduction screen appears 000 Device Filter Assistant introduction This application allows you to create a custom client installer for Device Filter and install Apple Remote Desktop tasks for Device Filter on the current system Go Back Continue 2 Click Continue The Device Filter Tasks screen appears 0860 Device Filter Assistant Device Filter Tasks Do you want to install Device Filter tasks for Apple Remote Desktop on the current system M Yes install tasks GoBack Co
23. their respective owners For onicS 3 This page intentionally left blank Foronics DEVICEFILTERMAC Contents DEVICE Filter O VEL VIEW aka siunkaiugala nls andlag E asninn 7 About Device ES ere eet eee ee errr entree Spanni eee ee er 7 About Apple Remote Deskop ARD g ssi ce atascceccdecestctusegauetdecoeacducessucdesesecducatauentesnse lt nesessecdenansecbesadeuabieedsbetetedauctee 7 Cominand Lie AD seeriana i AR E ET 7 a RO TS E E T E E E E T E ET i i 7 DONE ALONG Se E E A E E E auc tienen epee E A teenie 7 MTS E TU Ear AE E E T E T 8 Installing Using a Customized Device Filter Installer xag0gauk asian kk snar 8 Installing Using the Basic Device Filter Mac Installert sp AA allan 8 Installing via Apple Remote Desktop ssssssstsssinasninshs li al laga 8 Iistallmo Over Pee i Vers ON Ssnin E E onesie acersereess 8 Vnmstaline Device Pilte askan hanska onni E EEE EEEE EE 8 Using the Device Filter Preference Pane sansssassiss us akdsasirs ba ra a ur arina aeai ean risu a naan Oain aea 9 Seem Dr Fiter Usei iss aaa Tr 9 DEAR T Dee i E E cast anceeste aieeenteaeneeprue tear 10 PTS VES TD E A E A RI A E E sues E A E E A N E E A E E ies 11 095 TAD E A A I A E E OT AN I A E nce TE A E A TANT E E EE 12 Penor To i a a a la andi Ba na a ja ra 13 NOTI ODDA E E SE GN NNA A aa E 14 MGS SAD sine cease pr a inna G gnin JR ausa A EE Gunnlaug duli 15 IE OS A apa a R U SN Ba 17 Wee ille MEO e E A E O 18 Ee
24. uccessful If Deep Freeze is in a Frozen state Device Filter will refuse the uninstall command and prompt the user with the reason Adding Targeted Computers to the Task List This section has been written as a basic overview of how to use the Device Filter specific tasks in ARD For a more in depth description of how to best utilize ARD and ARD tasks please refer to your ARD user manual or to the Help Files found within ARD itself 28 In order to run a task there must be computers targeted to run the task To add one or more computers to be targeted to run the task complete the following steps l In the left column double click the task to be targeted to the specified computers Ihe Task Edit window appears At the bottom of the window is a dialog listing the designated computers assigned to the task Before a computer is added to the list it reads No Computers Drag and drop the preferred workstations or group of workstations into the dialog from the computers in the All Computers list The number of computers assigned to a specific task appears at the bottom of the window Click Save ForonicS Foronics DEVWICEFILTERMAC The following figure shows the enable task set to run as the current console user on a target computer 80080 DeviceFilter enable ey Send UNIX Command Template None fLibrary Application Support Faronics DeviceFilter CLI admin admin enable Enter a UNIX command to run using bin bash
25. vice Filter Installation and configuration of Device Filter requires administrative access Device Filter is distributed on a CD ROM or as a downloadable dmg file via the Internet Installing Using a Customized Device Filter Installer A customized Device Filter Installer can be created using the Device Filter Assistant Refer to Appendix I for more information Installing Using the Basic Device Filter Mac Installer To install Device Filter on a single computer perform the following steps l Double click the file Device Filter pkg to begin the installation process Depending on the configuration the file extension may not be visible Follow the steps presented and read and accept the license agreement Click Install and Device Filter Mac is installed on the computer It will be accessible as a preference pane from within System Preferences The computer requires a restart to complete the installation Installing via Apple Remote Desktop Device Filter is distributed as a standard installation package file and can therefore be installed over a network using Apple Remote Desktops Install Packages command Refer to the Apple Remote Desktop user guide for more information Refer to Appendix II for more information about controlling Device Filter over a network using Apple Remote Desktop Installing Over Previous Versions It is recommended that previous versions of Device Filter be uninstalled before installing a newer version thou
26. vice can be mounted on a computer To disallow FireWire devices from mounting or to choose whether devices can be mounted as either Read Only or Read Write select the preferred option If a certain maximum size of FireWire device is required input the preferred size in GB in the field provided To monitor FireWire activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab USB and FireWire CD DVD drives are controlled from the corresponding options on the Startup Control screen Click Continue The Network Control screen appears Device Filter Assistant Network Control wi Enable LAN Ethernet i Enable Wireless Ethernet Enable Modem wi Enable Bluetooth W Enable IR Port Log Activity Fi C GoBack Continue The Network Control screen is for configuring what network settings and connections are enabled on the workstation e LAN Ethernet e Wireless e Modem e Bluetooth modem only e IR Infra red Port To log Network connection activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and the activity log file Click Continue The Administrator Options screen appears 23 Foronics DEVICEFILTERMAC OAO Device Filter Assistant Administrator Options Enable One Time Device Mounting Enable Time limited access 10 The
27. zation 26 ForonicS Foronics DEVICEFILTERMAC disableWireless disables wireless ethernet connectivity on target computer s prevents digital cameras from connecting to target computer s dont CDDVDMounting prevents internal external CD DVD Read Only mounting on target computer s enableOneTimeDeviceMounting enables optional one time device authorization hides Device Filter menu bar enabled icon showDisabledlcon shows Device Filter menu bar disabled icon on target computer s showEnabledIcon shows Device Filter menu bar enabled icon on target computer s displays status of Device Filter on target computer s uninstalls Device Filter on target computer s displays Device Filter version number on target computer s Using and Editing Tasks In order to use the tasks each task must be edited to add site specific information such as usernames and passwords The following conditions and settings must apply for ARD to perform the tasks e The target computer s for the task must be specified e A user on the target computer must be specified to run the command Generally the commands take the following form lt path gt CLI lt username gt lt pwd gt lt commandname gt lt parameterl gt lt parameterN gt Where lt path gt is the installation location of the program lt username gt is the configured user name lt pwd gt is the configured password lt commandname gt is a supported command and lt parameter1 gt

File

Contents

Download Pdf Manuals

Related Search

Related Contents