Some fantastic new features were introduced in DeviceLock Enterprise Version 6.0 - specifically addressing the needs of larger organisations. 

Version 6.3 builds on that solid foundation, adding another huge raft of key features;

Windows 64 bit and Vista support

• The only removable device control solution to run under 64bit Windows and Vista. Vista Service Pack 1 fully supported.

• Added granular access control, auditing and shadowing for Windows Mobile devices. Now you can set permissions for different objects (files, contacts, e-mails, etc.) transferring from/to PDAs running Windows Mobile OS. Also, you can enable auditing and shadowing for files and other objects (contacts, e-mails, etc.) copying from the PCs to PDAs. All connection interfaces (USB, COM, IrDA, Bluetooth, WiFi) are supported.

PGP Whole Disk Encryption support

• DeviceLock now can detect encrypted PGP disks (USB Flash Drives and other removable media) and apply special "encrypted" permissions to them. Using these "encrypted" permissions you can, for example, allow writing only to the encrypted removable devices and deny writing to the unencrypted media.

Lexar SAFE PSD encrypted flash drive integration.

• DeviceLock detects Lexar SAFE PSD drives and applies special "encrypted" permissions to them.

PS/2 keylogger protection.

• DeviceLock obfuscates PS/2 keyboard's input and forces PS/2 keyloggers to record some garbage instead of the real keystrokes.

Added stream compression for audit logs and shadow data sending from DeviceLock Services to DeviceLock Enterprise Server.

• By enabling stream compression you can decrease the size of data transfers and thus reduce the network load.

Added a DeviceLock Service Settings Editor

• Allows you to create and modify all DeviceLock Service parameters (including permissions, audit and shadowing rules, settings, etc.) in an external file. Later this file can be loaded into DeviceLock Management Console and DeviceLock Group Policy Manager, used in the Set Service Settings plug-in of DeviceLock Enterprise Manager or signed using the DeviceLock Signing Tool. The DeviceLock Service Settings Editor is a snap-in for MMC and has the same interface as DeviceLock Management Console and DeviceLock Group Policy Manager.

Changed parameters for the silent setup.

• Now all DeviceLock Service settings, permissions, audit and shadowing rules can be defined in the external XML file and applied during the silent setup. To load an external XML file during the silent setup, specify the "SettingsFile" parameter.

Audit Records

• Audit records can now be automatically collected from remote computers and centrally stored on DeviceLock Enterprise Server. This provides a level of security beyond using the standard Windows Event Log on every computer. Even users with local admin privileges can't edit, delete or otherwise tamper with audit logs set to transfer to DeviceLock Enterprise Server.

• Now you can define what log should be used to store audit records. DeviceLock Service can write audit records to the standard Windows Event Log that stores locally and/or to its own protected log that sends to DeviceLock Enterprise Server for centralized storage.

Hardware Keyloggers

• DeviceLock can now detect hardware keyloggers. Hardware keyloggers are devices that record keystrokes. DeviceLock detects USB keyloggers and blocks keyboards connected to them.

RSoP Support

• DeviceLock now supports Resultant Set of Policy (RSoP). Now you can use the standard Windows RSoP snap-in to view the DeviceLock policy currently being applied, as well as to predict what policy would be applied in a given situation.

Traffic Shaping

• DeviceLock now supports traffic shaping, allowing you to define bandwidth limits for sending audit and shadow logs from DeviceLock Service to DeviceLock Enterprise Server. When the Quality of Service component is installed on a computer running DeviceLock Service, you can set three types of traffic priority: high, medium and low. Medium and low priorities reduce the network load.

Fastest Server First

• Now DeviceLock Service can choose the fastest available DeviceLock Enterprise Server from the list of servers. When the "Fast Servers First" parameter is enabled, all servers are divided into three groups depending on their network speed and preference is given to the fastest. If all of the fastest servers are unavailable, DeviceLock Service attempts to select a server from the group of next fastest servers and so on. If the "Fast Servers First" parameter is disabled, DeviceLock Service randomly selects a server from the list.

Adminstrator Acess Rights

• A new access right for DeviceLock Administrators, "Change", has been added in DeviceLock Service and DeviceLock Enterprise Server. Users with this access right can change settings, install, and uninstall DeviceLock Service or DeviceLock Enterprise Server, but they can't add new users to the list of DeviceLock Administrators or change access rights for existing users in this list.

Log Cleanup

• DeviceLock Enterprise Server can now automatically cleanup logs (Audit, Shadow, Server) according to defined rules and in a way that avoids database overflow.

Tape Devices

• A read-only access right for tape devices has been added.

• Now you can enable audit for tape devices.

Import / Export Devicelock Settings

• You can now export/import all DeviceLock Service parameters (including permissions, audit and shadowing rules, settings, etc.) to/from an external file from DeviceLock Management Console or DeviceLock Group Policy Manager. To avoid unauthorized modification this file can be signed with DeviceLock Certificate using the DeviceLock Signing Tool. Upon receiving this signed file, the user can import new settings using the DeviceLock applet from the Control Panel. This setup method is ideal when a user computer is not online and thus out-of-reach via management consoles. Moreover, using this export/import feature, DeviceLock Administrators can create and save a standard template and use it for applying settings to new computers.

Temporary Whitelist Changes

• The DeviceLock Temporary White List Administration Tool is now a part of the DeviceLock Signing Tool.

• The DeviceLock Temporary White List Authorization Tool is now a part of the DeviceLock applet. To use the Temporary White List feature, users should run the DeviceLock applet from Control Panel.

Upgrades

Existing customers with current maintenance can use this new version without any fee.

Other customers can also receive an upgrade but for an additional fee. Contact us on +44(0)8456 443911 or use our Enquiry Form.