FARONICS DEVICE FILTER MAC, Manual

Page 1: ...3AA3 B7 1 SQbW 1 b Z ...

Page 2: ...This page intentionally left blank ...

Page 3: ...88 Hours 7 00 am to 5 00pm Pacific Time Address Faronics Technologies USA Inc Suite 170 2411 Old Crow Canyon Road San Ramon CA 94583 USA Faronics Corporation 620 609 Granville St Vancouver BC V7Y 1G5 Canada Last modified August 2008 1999 2008 Faronics Corporation All rights reserved Faronics Deep Freeze Faronics Core Console Faronics Anti Executable Faronics Device Filter Faronics Power Save Faron...

Page 4: ...This page intentionally left blank ...

Page 5: ...8 Installing Over Previous Versions 8 Uninstalling Device Filter 8 Using the Device Filter Preference Pane 9 Creating the First Device Filter User 9 Start Tab 10 FireWire Tab 11 USB Tab 12 Network Tab 13 Admin Tab 14 Logging Tab 15 Users Tab 17 Device Filter Icons 18 Checking for Software Updates 18 Appendix I Device Filter Assistant Customizing the Installer 19 Appendix II Apple Remote Desktop In...

Page 6: ...This page intentionally left blank ...

Page 7: ...e Control Capability Tasks referred to in Appendix II for use with ARD can also be used in other third party command line control programs System Requirements Device Filter requires Mac OS X v10 3 0 and up Device Filter is a Universal application Intel and PPC compatible ARD integration requires Apple Remote Desktop version 2 2 or later A minimum of 256 MB RAM is recommended About Faronics Faronic...

Page 8: ...Installing via Apple Remote Desktop Device Filter is distributed as a standard installation package file and can therefore be installed over a network using Apple Remote Desktop s Install Packages command Refer to the Apple Remote Desktop user guide for more information Refer to Appendix II for more information about controlling Device Filter over a network using Apple Remote Desktop Installing Ov...

Page 9: ...rence pane When the changes are complete click the icon again to lock the screen and prevent any other changes When the lock is clicked for the first time the following dialog appears Enter a User Name and Password verify the password and click OK The first user added is considered to be the administrative user of Device Filter Only the first Device Filter user can add edit and or delete users and...

Page 10: ...lied The only exception is the enabling disabling of the infra red IR port This change does require a restart to take effect Stealth Mode To hide the visual presence of Device Filter from the user check the Hide Enabled Icon in menu bar and or Hide Disabled Icon in menu bar options Camera and CD DVD Control To allow cameras or video cameras check the preferred option To allow users to access CDs a...

Page 11: ...tain maximum size of FireWire device is required input the preferred size in GB in the field provided To log FireWire device activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab FireWire disks that are not ejected properly will not mount as Read Only FireWire CD DVD drive...

Page 12: ...um size of USB device is required input the preferred size in MB in the field provided To log USB activity traffic check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab USB peripherals such as keyboards and mice are not affected by Device Filter controls USB CD DVD drives are contr...

Page 13: ...network settings and connections will be enabled on a computer LAN Ethernet Wireless Modem Bluetooth modem only IR Infra red Port if this option is chosen a restart is required for it to become enabled disabled To log Network connection activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and the activity log file ...

Page 14: ... for a specified amount of time check Enable Time limited access If eithertheaboveoptionsareconfigured adialogboxwillappearwhenadisalloweddeviceisconnected to the workstation The user must enter a Device Filter username and password to continue For timed access a number of minutes must be entered into the corresponding field to authorize the device A warning will appear to the user two minutes bef...

Page 15: ...tion where the file will be written if this was not pre determined by using the Device Filter Assistant click Choose enter a file name and browse to the preferred save location If an activity log file location is designated with the Device Filter Assistant and that location does not exist on the workstation logging will be disabled upon install and a warning dialog box will prompt the user to ente...

Page 16: ... activity in kilobytes K To combine entries which have logged the same date action user and device thus making the log file smaller click Condense Note Condensing the activity log file can be done on an ongoing basis if desired New data will be incorporated into the condensed log file To clear old data from the Logging window either erase or rename the existing activity log file A new empty activi...

Page 17: ...lock the preference pane and alter the settings of the program Adding a User To add a user click Add In the dialog that appears enter the new user s name and password and confirm the password Click OK and the new user appears in the Users tab Deleting a User To delete a user select the preferred user name and click Delete The first user added is considered to be an administrative user of Device Fi...

Page 18: ...oftware Updates To check if the installed version of Device Filter is the most current one click the icon and choose Check for Updates Your default browser will load with a page stating if your version is up to date or if there is a more current one available for download Follow the links as necessary Alternativeely you can check to see if you are running the most current version of Device Filter ...

Page 19: ...stall Device Filter specific Saved Tasks into the Apple Remote Desktop ARD console on the current system ARD tasks are not part of the customized Device Filter installation package Neither ARD nor the ARD agent can be running in order for the task installation to be successful To run Device Filter Assistant complete the following steps 1 Double click the program icon to open Device Filter Assistan...

Page 20: ...t is currently running and giving the option to quit ARD immediately or at a later time The Device Filter tasks will only be installed if ARD is not running Choose the preferred action and click Continue The Device Filter Custom Installer screen appears 4 To create a custom client installer check Yes create a custom installer and click Continue The Device Filter Administrator screen appears ...

Page 21: ...ameras or video cameras check the preferred option To allow users to access CDs and DVDs in either Read Only or Read Write modes check the preferred option These options refer to both internal and external CD DVD drives If the activity of devices and connections is to be logged click Choose enter an activity log file name and browse to the preferred save location Remember to choose a location whic...

Page 22: ...ad Write select the preferred option If a certain maximum size of USB device is required input the preferred size in MB in the field provided To monitor USB activity check the Log Activity option This log is displayed in the Logging tab of the preference pane and within the activity log file at the location specified in the Logging tab Click Continue The FireWire Control screen appears ...

Page 23: ...ng tab of the preference pane and within the activity log file at the location specified in the Logging tab USB and FireWire CD DVD drives are controlled from the corresponding options on the Startup Control screen Click Continue The Network Control screen appears 9 The Network Control screen is for configuring what network settings and connections are enabled on the workstation LAN Ethernet Wirel...

Page 24: ... options To enable an otherwise disallowed device for one time use only check Enable One Time Device Mounting To enable an otherwise disallowed device for a specified amount of time check Enable Time limited access Click Continue The Choose Device Filter Installer screen appears ...

Page 25: ... Save screen appears 12 Click Choose A standard Save dialog appears Browse to a location to save the custom client installer and select it Alternatively drag and drop the preferred save location into the Choose dialog screen Click Continue The final screen appears stating that the custom client installer was successfully created and that the Device Filter tasks were installed into ARD 13 Click Qui...

Page 26: ...gital cameras to be connected to target computer s allowCDDVDMounting allows internal external CD DVDs Read Only to be mounted to target computer s allowVideoCameras allows video cameras to be connected to target computer s deleteUser deletes a user from target computer s disable disables Device Filter protection on target computer s disableAdminCanAuthorizeForTime disables optional timed access d...

Page 27: ...con hides Device Filter menu bar disabled icon hideEnabledIcon hides Device Filter menu bar enabled icon logFireWire logs activity of FireWire connected devices logNetwork logsactivityof networkconnections Ethernet Bluetooth wireless logUSB logs activity of USB connected devices setFireWireOptions configures FireWire device connectivity options setUSBOptions configures USB device connectivity opti...

Page 28: ...ient permissions to uninstall all components of Device Filter Mac If Device Filter is installed on a machine that is also running Deep Freeze the Mac must be in a Thawed state for the uninstall to be successful If Deep Freeze is in a Frozen state Device Filter will refuse the uninstall command and prompt the user with the reason Adding Targeted Computers to the Task List This section has been writ...

Page 29: ...k must be edited to use a Device Filter user name and password for the target computer s In the above example admin is the Device Filter user name and admin is the Device Filter password The name and password may already be present in the task depending on the settings that were specified in Device Filter Assistant ...

Page 30: ...in Terminal while connected to a remote workstation via SSH A sample script using the enable command is shown below Library Application Support Faronics DeviceFilter CLI admin password enable A sample script using the setUSBOptions command is shown below Library Application Support Faronics DeviceFilter CLI admin password setUSBOptions 3 512 In these examples admin is the name of a valid Device Fi...