FARONICS DEVICE FILTER MAC User manual

3AA3<B7/:1]\\SQbW]\1]\b`]Z

is page intentionally le blank

3
TechnicalSupport
Every effort has been made to design this soware for ease of use and to be problem free. If problems
are encountered, contact Technical Support:
Email: [e-mail]
Phone: [phone] or 604-637-3333
Hours: 7:00 am to 5:00pm (Pacific Time)
ContactInformation
Web: www.faronics.com
Email: [email protected]m
Phone: [phone] or 604-637-3333
Fax: [phone] or 604-637-8188
Hours: 7:00 am to 5:00pm (Pacific Time)
Address: Faronics Technologies USA Inc.
Suite 170 – 2411 Old Crow Canyon Road
San Ramon, CA 94583
USA
Faronics Corporation
620 - 609 Granville St.
Vancouver, BC V7Y 1G5
Canada
Last modified: August, 2008
© 1999 - 2008 Faronics Corporation. All rights reserved. Faronics, Deep Freeze, Faronics Core Console, Faronics Anti-Executable,
Faronics Device Filter, Faronics Power Save, Faronics Insight,Faronics System Profiler, and WINSelect are trademarks and/or registered
trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.

is page intentionally le blank

5
Contents
Device Filter Overview ......................................................................................................................................7
About Device Filter ........................................................................................................................................................7
About Apple Remote Desktop (ARD) .........................................................................................................................7
Command Line Control Capability .............................................................................................................................7
System Requirements.....................................................................................................................................................7
About Faronics................................................................................................................................................................7
Installing Device Filter ......................................................................................................................................8
Installing Using a Customized Device Filter Installer ...............................................................................................8
Installing Using the Basic Device Filter Mac Installer...............................................................................................8
Installing via Apple Remote Desktop...........................................................................................................................8
Installing Over Previous Versions ................................................................................................................................8
Uninstalling Device Filter .................................................................................................................................8
Using the Device Filter Preference Pane ...........................................................................................................9
Creating the First Device Filter User ...........................................................................................................................9
Start Tab .........................................................................................................................................................................10
FireWire Tab..................................................................................................................................................................11
USB Tab..........................................................................................................................................................................12
Network Tab..................................................................................................................................................................13
Admin Tab.....................................................................................................................................................................14
Logging Tab...................................................................................................................................................................15
Users Tab........................................................................................................................................................................17
Device Filter Icons........................................................................................................................................................18
Checking for Soware Updates ..................................................................................................................................18
Appendix I: Device Filter Assistant & Customizing the Installer ..................................................................19
Appendix II: Apple Remote Desktop Integration Tasks .................................................................................26
Using and Editing Tasks...............................................................................................................................................27
Adding Targeted Computers to the Task List ...........................................................................................................28
ARD Sample Output ....................................................................................................................................................30
Sample Command Line Script....................................................................................................................................30

is page intentionally le blank

7
DeviceFilterOverview
AboutDeviceFilter
Unregulated connectivity can cause a multitude of security, productivity, and policy challenges that
consume valuable computer and human resources. Device Filter Mac solves this problem by enabling
system administrators to effectively control device connectivity at an enterprise level. Anything from
an iPod to portable applications, or a modem connected via Bluetooth can now be managed to ensure
that no unauthorized data transfers or connections take place. Device Filter Mac even offers seamless
integration with Apple Remote Desktop (ARD), allowing administrators to deploy a customized device
connectivity configuration package to single or multiple computers
AboutAppleRemoteDesktop(ARD)
Apple Remote Desktop is Apple Computer’s complete desktop management solution for Mac OS X.
Faronics does not provide sales or technical support information for Apple Remote Desktop. More
information regarding ARD can be found at http://www.apple.com/remotedesktop.
CommandLineControlCapability
Tasks referred to in Appendix II for use with ARD can also be used in other third-party command line
control programs.
SystemRequirements
Device Filter requires Mac OS X v10.3.0 and up.
Device Filter is a Universal application (Intel and PPC compatible).
ARD integration requires Apple Remote Desktop version 2.2 or later.
A minimum of 256 MB RAM is recommended.
AboutFaronics
Faronics delivers innovative solutions that help manage,simplify,and secure complex IT environments.
Our products ensure 100% workstation availability, and have dramatically impacted the day-to-day
lives of thousands of information technology professionals. Fueled by a customer-centric focus,
Faronics’ technology innovations benefit educational institutions, healthcare facilities, libraries,
government organizations and corporations.Faronics’award-winning Deep Freeze preserves computer
configurations, providing total system consistency while allowing users complete, unrestricted
workstation access. Faronics Anti-Executable prevents unauthorized soware from being installed or
run, and Power Save lowers energy costs with intelligent energy management. Incorporated in 1996,
Faronics has an office in the USA and Canada.

8
InstallingDeviceFilter
Installation and configuration of Device Filter requires administrative access.
Device Filter is distributed on a CD-ROM, or as a downloadable .dmg file via the Internet.
InstallingUsingaCustomizedDeviceFilterInstaller
A customized Device Filter Installer can be created using the Device Filter Assistant. Refer to Appendix
I for more information.
InstallingUsingtheBasicDeviceFilterMacInstaller
To install Device Filter on a single computer, perform the following steps:
1. Double-click the file Device Filter.pkg to begin the installation process. (Depending on the
configuration, the file extension may not be visible.)
2. Follow the steps presented, and read and accept the license agreement.
3. Click Install and Device Filter Mac is installed on the computer. It will be accessible as a
preference pane from within System Preferences.
e computer requires a restart to complete the installation.
InstallingviaAppleRemoteDesktop
Device Filter is distributed as a standard installation package file and can therefore be installed over a
network using Apple Remote Desktop’s Install Packages command. Refer to the Apple Remote Desktop
user guide for more information. Refer to Appendix II for more information about controlling Device
Filter over a network using Apple Remote Desktop.
InstallingOverPreviousVersions
It is recommended that previous versions of Device Filter be uninstalled before installing a newer
version, though this is not necessary.
UninstallingDeviceFilter
To uninstall Device Filter, click the lock icon to unlock the preference pane. A Device Filter user
name and password will be required.
Click the icon and select Uninstall from the action menu.
Follow the steps presented; a restart is required to complete the uninstall process.
If Device Filter is installed on a machine that is also running Deep Freeze, the Mac must
be in a awed state for the uninstall to be successful. If Deep Freeze is in a Frozen state,
Device Filter will refuse the uninstall command and prompt the user with the reason.

9
UsingtheDeviceFilterPreferencePane
To launch the Device Filter preference pane, open System Preferences and click the Device Filter icon
listed under Other, as shown:
CreatingtheFirstDeviceFilterUser
Unless you have specified a first user prior to installation from within the Device Filter Assistant, the
first Device Filter user will have to be set up the first time the preference pane is accessed.
To configure Device Filter, click the lock icon to unlock the preference pane.(When the changes are
complete, click the icon again to lock the screen and prevent any other changes.)
When the lock is clicked for the first time, the following dialog appears:
Enter a User Name and Password, verify the password, and click OK.
e first user added is considered to be the administrative user of Device Filter. Only the first Device
Filter user can add, edit, and/or delete users, and this user cannot be deleted.
Up to three other Device Filter users can be created on the Users tab. ese users are the Device
Filter Administrators. Device Filter users must input their usernames and passwords to unlock the
preference pane and alter the settings of the program.

10
StartTab
e Start tab is where Device Filter can be enabled, and a number of other options including “stealth
mode” and camera/CD/DVD control can be configured.
Check the Enable Device Filter option to activate its controls.
Once Device Filter is enabled, the changes in configuration are immediate; no reboot is
needed for them to be applied. e only exception is the enabling/disabling of the infra-
red (IR) port. is change does require a restart to take effect.
Stealth Mode
To hide the visual presence of Device Filter from the user, check the Hide Enabled Icon in menu bar
and/or Hide Disabled Icon in menu bar options.
Camera and CD/DVD Control
To allow cameras or video cameras, check the preferred option.
To allow users to access CDs and DVDs in either Read Only or Read/Write modes, check the preferred
option. ese options refer to both internal and external CD/DVD drives.

 11
FireWireTab
e FireWire tab configures how a FireWire (IEEE 1394) device can be mounted on a computer.
To disallow FireWire devices from mounting or to choose whether devices can be mounted as either
Read Only or Read/Write, select the preferred option.
If a certain maximum size of FireWire device is required, input the preferred size (in GB) in the field
provided.
To log FireWire device activity, check the Log Activity option. is log is displayed in the Logging tab of
the preference pane and within the activity log file at the location specified in the Logging tab.
FireWire disks that are not ejected properly will not mount as Read Only. FireWire CD/
DVD drives are controlled from the corresponding options on the Start tab

12
USBTab
e USB tab configures how a USB device can be mounted on a computer.
To disallow or allow USB devices from mounting or to choose whether devices can be mounted as
either Read Only or Read/Write, select the preferred option.
If a certain maximum size of USB device is required, input the preferred size (in MB) in the field
provided.
To log USB activity traffic, check the Log Activity option. is log is displayed in the Logging tab of the
preference pane and within the activity log file at the location specified in the Logging tab.
USB peripherals such as keyboards and mice are not affected by Device Filter controls.
USB CD/DVD drives are controlled from the corresponding options on the Start tab. .

 13
NetworkTab
e Network tab configures what network settings and connections are enabled on the workstation.
Choose from the following options to designate what network settings and connections will be enabled
on a computer:
•LAN Ethernet
•Wireless
•Modem
•Bluetooth (modem only)
•IR (Infra-red) Port: if this option is chosen, a restart is required for it to become enabled/
disabled
To log Network connection activity, check the Log Activity option. is log is displayed in the Logging
tab of the preference pane and the activity log file.

14
AdminTab
e Admin tab is for enabling specific authorization options for storage devices.
To enable an otherwise disallowed device for one-time use only, check Enable One-Time Device Mounting.
To enable an otherwise disallowed device for a specified amount of time, check Enable Time-limited access.
If either the above options are configured,a dialog box will appear when a disallowed device is connected
to the workstation. e user must enter a Device Filter username and password to continue.
For timed-access, a number of minutes must be entered into the corresponding field to authorize the
device. A warning will appear to the user two minutes before the timed-access is set to expire.

 15
LoggingTab
e Logging tab allows administrators to view the activity of the specified devices/connections and
to designate other logging options. If the Log Activity option is chosen on the FireWire, USB, and/or
Network tabs, the Logging tab displays this activity.
e logging data can be viewed either from within the tab or via a Device Filter activity log file.
To choose the name of the activity log file and the location where the file will be written (if this was not
pre-determined by using the Device Filter Assistant), click Choose, enter a file name and browse to the
preferred save location.
If an activity log file location is designated with the Device Filter Assistant and that
location does not exist on the workstation, logging will be disabled upon install and a
warning dialog box will prompt the user to enter a new location for this file.
Also, if you are running Device Filter on a computer that has Deep Freeze installed, the
activity log file must be saved on a awed partition or the log data will not be retained
aer restarts.

16
Device Filter logs information and groups it into columns as follows:
•Date displays the date of activity
•User displays the local user under whose account the activity took place
•Device displays the type of connection or name of device
•Action displays whether the action was incoming, outgoing, Read or Write
•Amount displays the amount of data activity in kilobytes (K)
To combine entries which have logged the same date, action, user and device (thus making the log file
smaller), click Condense.
Note: Condensing the activity log file can be done on an ongoing basis if desired. New data will be
incorporated into the condensed log file.
To clear old data from the Logging window, either erase or rename the existing activity
log file. A new, empty activity log file (with the previously specified name) will be
created, and the Logging window will display the activity that is logged in this new file.

 17
UsersTab
e Users tab is for adding, deleting, and editing users. Device Filter users are the administrators of the
program and have unique usernames and passwords. ere can be a maximum of four Device Filter
users.
e first user added is considered to be the administrative user of Device Filter. Only the first Device
Filter user can add, edit, and/or delete users, and this user cannot be deleted.
Device Filter users must input their usernames and passwords to unlock the preference pane and alter
the settings of the program.
Adding a User
To add a user, click Add. In the dialog that appears, enter the new user’s name and password, and
confirm the password.
Click OK and the new user appears in the Users tab.
Deleting a User
To delete a user, select the preferred user name and click Delete.
e first user added is considered to be an administrative user of Device Filter. Only this admin user
can add, edit, and/or delete users, so this user cannot be deleted.
Editing a User
To edit a user, click Edit. In the dialog that appears enter the new username and/or password, and
confirm the password.
Click OK and the user information is updated.

18
DeviceFilterIcons
When Device Filter is installed, the Device Filter icon will appear in the menu bar.
e Enabled icon indicates that Device Filter control is active.
e Disabled icon indicates that Device Filter control is deactivated.
CheckingforSoftwareUpdates
To check if the installed version of Device Filter is the most current one, click the icon and
choose “Check for Updates…”
Your default browser will load with a page stating if your version is up to date or if there is a more
current one available for download. Follow the links as necessary.
Alternativeely, you can check to see if you are running the most current version of Device Filter Mac
via the checkForUpdates task in Apple Remote Desktop.

 19
AppendixI:DeviceFilterAssistant&CustomizingtheInstaller
Device Filter Assistant can be used to create customized Device Filter installation packages and allows
for the creation of global settings for a multiple workstation environment. Device Filter Assistant can
also directly install Device Filter specific Saved Tasks into the Apple Remote Desktop (ARD) console
on the current system. ARD tasks are not part of the customized Device Filter installation package.
Neither ARD nor the ARD agent can be running in order for the task installation to be successful.
To run Device Filter Assistant, complete the following steps:
1. Double-click the program icon to open Device Filter Assistant. e Introduction screen
appears:
2. Click Continue. e Device Filter Tasks screen appears:

20
3. Check the box marked Yes, Install Tasks if you want the Device Filter Mac specific tasks to be
exported into ARD on the current machine. A dialog may appear, stating that ARD or the
ARD agent is currently running and giving the option to quit ARD immediately or at a later
time. e Device Filter tasks will only be installed if ARD is not running. Choose the preferred
action, and click Continue.
e Device Filter Custom Installer screen appears:
4. To create a custom client installer, check Yes, create a custom installer and click Continue.
e Device Filter Administrator screen appears: