DriveLock Product Feedback & Ideas
Share your ideas for DriveLock.
Teilen Sie Ihre Ideen mit DriveLock.
70 results found
-
Syntax-basierte Benachrichtungsregeln - DOC
Aktuell können Benachrichtigungsregeln (E-Mail) im DOC nur auf Basis der Event ID getriggert werden.
Sinnvoll wäre die Möglichkeit, innerhalb der ID auf spezifische Syntaxinhalte filtern und alarmieren zu können.
BSP: EVENT ID 130 - The device HP LaserJet Pro M404-M405 was connected to the computer.;Device type: Media player.
Alle anderen Events zur ID130 sollen dann keine E-Mail Benachrichtigung im DOC zur Folge haben.
Filterung im Bereich der Eventgenerierung selbst, würde die ID nur einschränken. Es würden Informationen verloren gehen.4 votes -
Verknüpfung beim Inhaltstest von Dateien sollte frei wählbar sein
Bei bspw. klassifizierten Dokumenten nach ISO 27001 sollte es möglich sein den Inhaltstest bspw. so zu definieren z.B. Typdefinition docx und ("Intern" oder "Öffentlich") und nicht ("Vertraulich" oder "Streng Vertraulich") . So kann sichergestellt werden das nur docx-Dateien exportiert werden dürfen die als Intern oder Öffentlich klassifiziert sind. Für diesen Ansatz müssten bestimmt Regeln auch negiert werden können.
3 votes -
Dateitypdefinitionen: Eigenschaften im Footer der Datei Prüfen
Um eine noch feinere Filterung von Dateitypen zu definieren, wäre eine zusätzliche Prüfung auf den "footer" der Datei in meinen Augen sinnvoll. Beispielsweise wäre hier GnuPG zu nennen wo man dann auf "--BEGIN PGP PUBLIC KEY" und "--END PGP PUBLIC KEY" prüfen kann und nur wenn beide als positiv zurückgegeben werden, die Datei auch freigegeben wird
1 vote -
... want to have a feature to restore central managed folder entries from DMC view, when deleted them by error ...
Referenz #INC11510
ein Feature zum Wiederherstellen/Einblenden von zentral verwaltete Ordner in der DMC bzgl Fileprotection bei versehentlichen Löschen. die Datenbankeinträge bleiben ja in der SQL Datenbank gesetzt (DFP Einträge), durch ein Wiederherstellung oder Einblend-Button könnte man bei versehentlich gelöschten Ordnern diese wieder einblenden lassen!1 vote -
Agent Autoupdate Build-Level Management
Automatic Agent Update should support Agent-Build-Levels to get rid of the unreal timestamp workaround in the auto update scheduler.
i.e. if I want to update my Agents to a certain Build, please add a selection of builds so that the Auto-Update-Feature could stay valid and active. If a new Agent-Build was released, Agents should not automatically update until I approve or change the Build level in the Auto-Update-Configuration.
2 votes -
Policy Assignments via DOC should include full path of AD objects
Actually , policy assignment in the DOC only shows f.e the name of the OU but not the AD Path. For organization using the same OU Name but under different path it is not possible to identify which OU to choose. Other objects might have the same problem.
3 votes -
Possibility to define online remote unlock similar as the SelfService group settings
While unlocking BitLock2Go encrypted sticks via remote unlock the access is only granted to user (which are not in the allowed list) if in the Remote Unlock Wizard the option "deactivate enforced encryption".
We would therefore like to have an option to set this checkbox always similar to selfservice groups where this is possible to be (Optional) set / disabled. This could be for example a role permission which is enabled for the helpdesk role.2 votes -
SB-Freigabe von USB-Sticks auf "Nur lesbar" zu setzen
Bei der SB-Freigabe von USB-Datenträgern sollte es möglich sein, diese auf "Nur lesbar" zu setzen damit ein Datenabzug verhindert werden kann, es aber trotzdem möglich ist, Daten vom Datenträger zu lesen. Nötig z.B. bei einem Clickshare Gerät wo die Software aufgerufen werden muss.
7 votes -
new computer attribut to identify location
thanks to MQTT implementation it is now possible to know in the DOC if computers are alive and to communicate with them whereever they are (LAN, intertnet, home, ...). It would be nice to have a computer attribute available in the DOC computer view to identify where the PC is. The policy definition "network location" could be used for this.
4 votes -
Export the reports to UNC path
Subject: Need automatic DOC Report export to Network shares and drives
Content: Today sheduled daily reports can configured with an Action for Sending these Reports to an eMail.
However we do need here a new "Actions Target" feature, so that sheduled DOC Reports also are automatically stored to a configured Network share.Soon when you have created this UserVoice
then your customer should vote on it as anext step.=========================
Please let me know when you have voted and created the new Uservoice.
Please be aware, UserVoice is directly managed by Productmanagement (PM) and development.
If they have questions, the…1 voteAs an Administrator of my company, I want to be able to automatically export DriveLock reports to various destinations including WebDAV, FTP, and cloud storage APIs, in addition to UNC paths, according to a predefined schedule. This will allow us to utilize modern cloud storage solutions and meet our company's diverse data handling and policy compliance requirements efficiently.
- Destination Flexibility: The system should allow reports to be exported to WebDAV, FTP, UNC paths, and directly to cloud storage services (like Amazon S3, Azure Blob Storage, Google Cloud Storage).
- Scheduling Capability: Administrators must be able to schedule the automatic export of reports at regular intervals (daily, weekly, monthly).
- Security Compliance: All data transfers should comply with industry-standard encryption and security protocols.
- Configuration Simplicity: Setting up and configuring export destinations should be straightforward through a user-friendly interface.
- Documentation and Support: Comprehensive documentation and support should be available to guide administrators on how…
-
SB-Freigabe weiter einschränken als Geräte-Typ
In den Eigenschaften einer SB-Freigabe ist es lediglich möglich einzuschränken, ob Laufwerke / Geräte / Smartphones etc. freigegeben werden können. Es kann nicht weiter differenziert werden, welche Geräteklassen freigegeben werden können z.B. sollen nur USB-Controller freigegeben werden dürfen nicht aber Smartcard readers o.ä. .
4 votes -
Ability to create rule specific Usage Policy text
As an Admin I have a wide variety of use cases for Usage Policys. Sadly right now it seems I can only set one Custom Text for the Usage Policy.
In a optimal situation I would like to display different Text of the Usage Policy depending on what rule is triggered.
Example:
Rule 1 is triggered for HID and tells the user HID devices are allowed if they have been provided by the Company.
Rule 2 is triggered for a special Testing Group within the organisation for every printer that is usually blocked. This tells them they can use this…2 votes -
Inventory Daten dediziert löschen
DriveLock sollte die Möglichkeit besitzen, Inventorydaten dediziert zu löschen. Hierbei sollten zwischen Drives / Devices / Applikationen usw. unterschieden werden können.
In Kundenumgebungen die schon über mehrere Versionen hinweg bestehen, ist die Auswertung der Daten derzeit einfach zu unübersichtlich. DIe Möglichkeit den Rechner aus dem Operations Center zu löschen und danach das Inventar neu einzulesen ist m.E. nicht ausreichend.8 votes -
Analog zur Cross-Network Protection bei WIFI soll diese auch bei 2 LAN Verbindungen blockieren können
Drivelock bietet bereits die Funktionalität bei einer bestehenden Ethernetverbindung WIFI zu blockieren. (adminhdb S136 4.1.2). Der Wunsch ist nun das bei einer bestehenden EthernetVerbindung eine weitere EthernetVerbindung (egal welcher BUS) automatisch blockiert werden kann, um so auch ein Bridging mittels 2 LAN Adaptern zu unterbinden.
2 votes -
Report Column Values change to GB or MB instead of Bytes.
When we export a report, we currently only view the data numerical values in bytes.
Can we have the option to change the data values in a column to MB or GB instead of bytes.
2 votes -
DOC Should integrate AD attributes first- and last-
For company using number as login name it is not easy for DOC admin to identifiy on which PC a user is working. The DOC should integrates in the views operation>computers and operation>users the AD attributes firstname and lastname in order to be able to quickly identify loginname with real user. The column chooser functionallity should of course offers this two new attributes to be shown.
4 votes -
Selectable positioning of the dialog box for user notifications of the agents
It would be helpful for the user if the agent user notification dialog could be moved to a selectable position. Currently, this pops up in the lower right corner.
On devices with visualizations for operation in the plant area, operation and acknowledgement buttons of the UI are blocked in this situation.
It would be convenient to define the positions left-up, left-down, etc. via configuration in the MMC or via integration of the handling of the window position in the agent as last-position-as-default.1 vote -
Drivelock Firewall logs
The computer logs should be extended by a special firewall event list. the list should have columns and layout like in common firewalls from sophos, fortinet, etc..
The list should contain source ip, hostname, port
destination ip, hostname, port
requested url
timestampsthese events should be available in computer details and in a global list where I can search for computer name, port, etc...
our hardware firewalls can only monitor traffic (allowed and denied request) between firewall zones. drivelock could fill the gap and list traffic between hosts in a zone.
also it is much easier to find blocked ports…
5 votes -
Alert frequency based rule
DriveLock should allow the creation of alert based on frequency and time. Ideally with boolean logic f.e:
-if event happens (more¦less) X time within Y minutes (most important one)
-if event happens between X am and Y pm
-if event does not happen between X am and Y pm
-if event happened at least X minutes after the last event
-if event not happened after X minutes of the previous event4 votesEvent happens more than x times in y seconds is already possible
-
Enc2Go should be able to reformat new USB Sticks to exFAT, even Sticks are already formatted to NTFS or exFat
Today the Encryption to Go feature is able to reformat the physical USB sticks only from FAT32 -> to exFat or NTFS.
We want to have a feature that the USB stick will be always reformatted for example to exFat, regardless which Filesystem is current used by the USB stick. This feature would help to always cleanup USB sticks during container creation, and would help to move from NTFS formatted sticks back to exFat. Which is otherwise a manual task (not possible in a large environment).2 votesWe will pursue this idea further, taking into account the voting in this forum, among other aspects, before including it in the detailed product backlog for the next version.
- Don't see your idea?