33 results found

1. Pop-Up Meldungen gezielt steuern

   ich möchte ein Feature vorschlagen, das die Möglichkeit bietet, bestimmte Events am Endpunkt gezielt von der Anzeige einer Pop-up-Meldung auszuschließen.

   Business Impact & Use Case

   Ein konkretes Beispiel ist die Lizenzverwaltung in DriveLock:
   Wenn die Lizenz in Kürze ausläuft, wird auf jedem Endpunkt eine wiederkehrende Warnung angezeigt („Die Lizenz läuft in X Tagen aus“), bis eine Verlängerung erfolgt. In bestimmten Szenarien wäre es wünschenswert, diese Meldung gezielt zu unterdrücken, um unnötige Verunsicherung oder Störungen bei den Endanwendern zu vermeiden.

   Darüber hinaus sehe ich auch Anwendungsfälle in den Modulen Application Control und Device Control, bei denen es sinnvoll wäre, eine differenzierte Steuerung darüber zu haben, welche Meldungen am Endpunkt angezeigt werden und welche nicht. Dies könnte beispielsweise helfen, unnötige Pop-ups zu reduzieren oder nur sicherheitskritische Hinweise anzuzeigen.

   Vorgeschlagene Lösung

   Es sollte eine Option implementiert werden, mit der Administratoren bestimmte Events gezielt von der Pop-up-Anzeige ausnehmen können, während andere weiterhin wie gewohnt angezeigt werden. Dies würde die Kontrolle über die Benutzerkommunikation verbessern und die Benutzerfreundlichkeit steigern.

   ich möchte ein Feature vorschlagen, das die Möglichkeit bietet, bestimmte Events am Endpunkt gezielt von der Anzeige einer Pop-up-Meldung auszuschließen.

   Business Impact & Use Case

   Ein konkretes Beispiel ist die Lizenzverwaltung in DriveLock:
   Wenn die Lizenz in Kürze ausläuft, wird auf jedem Endpunkt eine wiederkehrende Warnung angezeigt („Die Lizenz läuft in X Tagen aus“), bis eine Verlängerung erfolgt. In bestimmten Szenarien wäre es wünschenswert, diese Meldung gezielt zu unterdrücken, um unnötige Verunsicherung oder Störungen bei den Endanwendern zu vermeiden.

   Darüber hinaus sehe ich auch Anwendungsfälle in den Modulen Application Control und Device Control, bei denen es sinnvoll wäre, eine differenzierte… more

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  1 comment  ·  Usability  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Temporäre Freigabe / Self-Service für einzelne Wechseldatenträger

   Durch die Bestätigung der Verwendungsrichtlinie mit Eingabe des Windows Kennwortes wird die SB-Freigabe gestartet.
   Die SB-Freigabe, so wie auch die temporäre Freigabe ist in der Lage nur den jeweiligen Wechseldatenträger freizugeben, der auch als Trigger für den Aufruf fungierte.
   Hierzu wird eine USB-Port und Seriennummer Kombination benutzt.
   Die Freigabe jedes anderen Wechseldatenträgers benötigt zwingend eine weitere SB-Freigabe.
   (Im Falle mehrerer Partitionen, kann eine Partition ausgewählt werden.) - nicht für unseren Use-Case, aber generell eine gute Featureerweiterung.
   Es wird nur der jeweilige Wechseldatenträger freigegeben, der auch als Trigger für dessen Aufruf fungierte.
   Dieser wird nochmals auf Viren gescannt und erst nach einem unauffälligen Scan freigeschaltet.
   Die Freigabe endet durch Ablauf der Freigabezeit / Entfernen des Wechseldatenträgers aus dem Gerät / Abmeldung des Benutzers.
   Der wesentliche Unterschied ist, dass bei diesem Konzept eine explizite seriennummerbezogene Portfreigabe stattfindet, die durch ein herausziehen des Wechseldatenträgers beendet wird.

   Durch die Bestätigung der Verwendungsrichtlinie mit Eingabe des Windows Kennwortes wird die SB-Freigabe gestartet.
   Die SB-Freigabe, so wie auch die temporäre Freigabe ist in der Lage nur den jeweiligen Wechseldatenträger freizugeben, der auch als Trigger für den Aufruf fungierte.
   Hierzu wird eine USB-Port und Seriennummer Kombination benutzt.
   Die Freigabe jedes anderen Wechseldatenträgers benötigt zwingend eine weitere SB-Freigabe.
   (Im Falle mehrerer Partitionen, kann eine Partition ausgewählt werden.) - nicht für unseren Use-Case, aber generell eine gute Featureerweiterung.
   Es wird nur der jeweilige Wechseldatenträger freigegeben, der auch als Trigger für dessen Aufruf fungierte.
   Dieser wird nochmals auf Viren gescannt und erst nach… more

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  1 comment  ·  Device Control  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. SAML Anmeldung mit UPN

   Aktuell wird für die SAML-Authentifizierung immer der Identifier des Benutzers verwendet.
   Bei AD-Benutzern wird die SID verwendet. Die SID kann jedoch mit dem System als SAML-Response übergeben werden.
   Somit ist der SAML Login mit einem AD-User nicht möglich, wenn die Response keine SID enthält.

   Die SAML Einstellung sollten die Möglichkeit bieten sich mittels UserPrincipalName anzumelden.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  0 comments  ·  Environment Management  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. user feature permission summary tab

   We use the DriveLock default user rights roles and if a functionality for e.g. the helpdesk is missing, we create a separate role for each function or right in order to be able to assign permissions more granularly. The disadvantage of this approach is that it quickly becomes confusing and inefficient in the user permission/user role overview or research.
   A separate item under the respective selected user, in which all cumulative rights from the respective assigned roles are then listed, e.g. analogous to the role interface, in order to gain a quick overview of what the corresponding user is really allowed to do, would be very helpful.

   We use the DriveLock default user rights roles and if a functionality for e.g. the helpdesk is missing, we create a separate role for each function or right in order to be able to assign permissions more granularly. The disadvantage of this approach is that it quickly becomes confusing and inefficient in the user permission/user role overview or research.
   A separate item under the respective selected user, in which all cumulative rights from the respective assigned roles are then listed, e.g. analogous to the role interface, in order to gain a quick overview of what the corresponding user is really… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Support for High Availability, Disaster Recovery with SQL Availability Group

   Support for High Availability, Disaster Recovery with SQL Availability Group:
   https://learn.microsoft.com/en-us/dotnet/framework/data/adonet/sql/sqlclient-support-for-high-availability-disaster-recovery#connecting-with-multisubnetfailover

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  1 comment  ·  Setup / Installation  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Kampagnen fehlen im DOC die Triger

   Leider fehlen die Trigger wen die Kampagnen im DOC erstellt wird.
   So bekommen die User nicht mit das für die Gruppe eine neue Kampagne erstellt wurde.
   Bitte die Trigger wieder implementieren so das man einstellen kann das die Kampagnen nach Logon oder nach Event z.B. USB Stick einstecken gestartet werden soll.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  0 comments  ·  Security Awareness  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Support für Yubikeys 2FA DOC

   Sehr geehrte Damen und Herren,
   wir nutzen aktuell Yubikeys als 2. Faktor für unsere Admin PCs.
   Das gleiche benötigen wir für das DOC.
   Könnten Sie im DOC Support für Smartcards hinzufügen?
   Die Yubikeys sind hier sehr viel praktischer, als die Token App.

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  0 comments  ·  Usability  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. Security Awareness - EInstellungen für Kampagnen von der DMC in das DOC übertragen

   Die Einstellungen für Awareness Kampagnen, welche in der DMC verfügbar sind, sollten auch über das DOC verfügbar sein.

   Trigger: Zu welchem Ereignis soll die Kampagne angezeigt werden?
   Wann/ wie oft soll die Kampagne wiederholt werden?
   Benutzer muss bestätigen
   Vollbild ja / nein?

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  0 comments  ·  Security Awareness  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. USB-Laufwerke aus Regeln entfernen

   Es sollte möglich sein, dass Einträge aus bestehenden Laufwerksregeln (DOC - Sicherheitskontrollen - Laufwerke - Regeln) entfernt werden können, indem man die entsprechenden Laufwerke unter DOC - Inventar - Geräte - Laufwerke vorher selektiert hat.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   on the roadmap  ·  0 comments  ·  Device Control  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. Agent Meldungen für Application Control deaktivierbar machen

    Es sollte möglich sein sämtliche lokale Agent Meldungen aus dem Modul Application Control zu deaktivieren.
    Hintergrund:
    Wir verwalten über 1300 PCs und möchten flächendeckend AppCtrl einsetzen. Die Anwender an den PCs sind zum Großteil nicht IT Affin.
    Diese großen gelben Warnfenster z.B. im Whitelistmodus (simulation) verwirren oder verängstigen den Anwender. Die am Client gesammelten Informationen und / oder Regelverstöße interessieren in der Simulation vor einem Rollout nur die Admins.
    Wir benötigen diesbezüglich dringend eine derartige Anpassung um den Rollout durchführen zu können.

    7 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Application Control  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. SB-Freigabe weiter einschränken als Geräte-Typ

    In den Eigenschaften einer SB-Freigabe ist es lediglich möglich einzuschränken, ob Laufwerke / Geräte / Smartphones etc. freigegeben werden können. Es kann nicht weiter differenziert werden, welche Geräteklassen freigegeben werden können z.B. sollen nur USB-Controller freigegeben werden dürfen nicht aber Smartcard readers o.ä. .

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  1 comment  ·  Device Control  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Inventory Daten dediziert löschen

    DriveLock sollte die Möglichkeit besitzen, Inventorydaten dediziert zu löschen. Hierbei sollten zwischen Drives / Devices / Applikationen usw. unterschieden werden können.
    In Kundenumgebungen die schon über mehrere Versionen hinweg bestehen, ist die Auswertung der Daten derzeit einfach zu unübersichtlich. DIe Möglichkeit den Rechner aus dem Operations Center zu löschen und danach das Inventar neu einzulesen ist m.E. nicht ausreichend.

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  2 comments  ·  Alerts / Analytics & Forensics  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. DOC Should integrate AD attributes first- and last-

    For company using number as login name it is not easy for DOC admin to identifiy on which PC a user is working. The DOC should integrates in the views operation>computers and operation>users the AD attributes firstname and lastname in order to be able to quickly identify loginname with real user. The column chooser functionallity should of course offers this two new attributes to be shown.

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Usability  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Selectable positioning of the dialog box for user notifications of the agents

    It would be helpful for the user if the agent user notification dialog could be moved to a selectable position. Currently, this pops up in the lower right corner.
    On devices with visualizations for operation in the plant area, operation and acknowledgement buttons of the UI are blocked in this situation.
    It would be convenient to define the positions left-up, left-down, etc. via configuration in the MMC or via integration of the handling of the window position in the agent as last-position-as-default.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Usability  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Offline scan option for MS defender should be included in the list of actions in DOC

    Actually the DOC offers for MS Defender scans: quick, full an drives. An additional option should be add to support the offline scan MS defender supports.

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Usability  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. DOC reports - export to spreadsheet format

    I think it would be good to allow DOC reports (in list format) to be exportable to spreadsheet format, not just in pdf format.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    on the roadmap  ·  AdminAndreas Fuchs (Product Management, DriveLock SE) responded

    general ability to export all lists as csv

17. Drivelock Firewall logs

    The computer logs should be extended by a special firewall event list. the list should have columns and layout like in common firewalls from sophos, fortinet, etc..
    The list should contain source ip, hostname, port
    destination ip, hostname, port
    requested url
    timestamps

    these events should be available in computer details and in a global list where I can search for computer name, port, etc...

    our hardware firewalls can only monitor traffic (allowed and denied request) between firewall zones. drivelock could fill the gap and list traffic between hosts in a zone.

    also it is much easier to find blocked ports by windows defender. so we are able to open these ports or apply a rule to a drivelock firewall policy.

    The computer logs should be extended by a special firewall event list. the list should have columns and layout like in common firewalls from sophos, fortinet, etc..
    The list should contain source ip, hostname, port
    destination ip, hostname, port
    requested url
    timestamps

    these events should be available in computer details and in a global list where I can search for computer name, port, etc...

    our hardware firewalls can only monitor traffic (allowed and denied request) between firewall zones. drivelock could fill the gap and list traffic between hosts in a zone.

    also it is much easier to find blocked ports… more

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Operating System Management  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. 802.1x support for SSO in the PBA/Win-Login

    Currently the Single-Sign-On method for the PBA or for Windows doesn't support port configuration of 802.1x.
    That hinder us from using this feature.

    So I'd like to suggest implementing the support of a port configuration 802.1x to use the SSO in the PBA/Win-Login.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Disk Encryption  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Defender Management - Identify outdated AV signatures correctly

    The defender dashboard should not flag hosts as having an "outdated antivirus definition" when the "Last contact (DriveLock Agent)" is overdue as well.

    This indicates an "offline" wokstation rather than a not working antivirus-update and is therefore confusing.

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    on the roadmap  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Software Packages Publishing should be multi tenant aware

    actually the publishing of software package through the DES server (mainly the drivelock agent) works for all configured tenant. It should be possible to published different version of the agent in different tenant.

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Setup / Installation  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    on the roadmap  ·  AdminMark Hartmann (Director Corporate Strategy, DriveLock SE) responded

    We plan to add the possibility that a certain agent version can be published to a specific tenant only. This feature will add flexibility for our own managed services and our partners who manage the environments for their customers.