File Type Filtering
You can configure File type filters for the Removable Storage Devices, Floppy Disk Drives, and DVD/CD Drives device class policies that limit access to certain file types.
After setting Read or Read and Write on the Permission Settings page of the Device Class Policy wizard, the File Filters option becomes available. Selecting it provides access to the File Filter Settings page, on which you can configure the file types that can be written to/read from connected devices.
On the File Filter Settings page you can:
- Allow all files types to be accessed.
- Allow only certain file types to be accessed, selectable from a list.
You can also specify the ways all or selected files can be copied.
Allow Import: User can copy files from the external device to the local hard drive.
Allow Export: User can copy files from the local hard drive to the external device.
If no filter is defined or the import/export options of the filter dialog are not activated, then even if some files are selected, the profiled permission applies to all type of files.
Warning: File type filtering rules cannot be combined with encrypt, decrypt, and bus-specific permissions inside the same rule. One permission cannot have both file type filtering defined and encrypt/decrypt/bus-specific options selected, but separate permissions can, and will be properly enforced.
If you combine the access settings, file filtering works as follows:
Permission Type |
Example |
---|---|
Device access set to None |
You are unable to define any file filter settings. |
Device access set to Read |
If you select MPEG Audio Stream Layer III in the File Type Filtering dialog then read access is allowed for .mp3 files. |
Device access set to Read Write |
If you select Microsoft Word in the File Type Filtering dialog then read-write access is allowed for .doc files. |
When defining file filters, you cannot open files directly from the external device. You must first copy them to your system (or another authorized hard disk drive).
File Type Filtering Permissions
You can define different file filters for read or read-write permissions.
When applying file filters to a policy, you can use the following file type filtering options:
Permission Setting |
Import-Export Settings |
Result |
---|---|---|
Read |
Allow Import |
Allow file copy from device to the local HDD. |
Allow Export |
Allow file copy from the local HDD to the device. |
|
Read-Write |
None |
Filters are not enforced. The end result is like not defining filters at all. |
If no filter is defined or the import/export options of the filter dialog are not activated, then even if some files are selected, the profiled permission applies to all type of files.
Warning: File type filtering rules cannot be combined with encrypt, decrypt, and bus-specific permissions inside the same rule. One permission cannot have both file type filtering defined and encrypt/decrypt/bus-specific options selected, but separate permissions can, and will be properly enforced.
If you combine the access settings, file filtering works as follows:
Permission Type |
Example |
---|---|
Device access set to None |
You are unable to define any file filter settings. |
Device access set to Read |
If you select MPEG Audio Stream Layer III in the File Type Filtering dialog then read access is allowed for .mp3 files. |
Device access set to Read Write |
If you select Microsoft Word in the File Type Filtering dialog then read-write access is allowed for .doc files. |
When defining file filters, you cannot open files directly from the external device. You must first copy them to your system (or another authorized hard disk drive).
Available File Type Filters
The File Filters page in the Policy Wizard dialog allows you to select which file types can be read and transferred to or from a device.
The following table provides a full listing of the file types available in the File Filters page.
File Type Family |
File Type |
|
---|---|---|
Microsoft Office |
Microsoft Word |
|
Microsoft Excel |
|
|
Microsoft Visio |
|
|
Microsoft PowerPoint |
|
|
Microsoft Graph |
Microsoft Graph Chart |
|
Microsoft Project |
Microsoft Project File |
|
Microsoft Access Database |
||
Microsoft Office Open XML |
Microsoft Office Open XML Word |
Microsoft Office Open XML Word Document |
Microsoft Office Open XML Excel |
Microsoft Office Open XML Excel Work Book |
|
Microsoft Office Open XML PowerPoint |
Microsoft Office Open XML Presentation |
|
Open Office |
OpenOffice Writer |
|
OpenOffice Math |
|
|
OpenOffice Base |
OpenOffice Data Base |
|
OpenOffice Calc |
|
|
OpenOffice Draw |
|
|
OpenOffice Impress |
|
|
Adobe Acrobat |
Adobe Illustrator Vector Graphic |
|
Adobe Acrobat Portable Document Format |
||
Archive |
Zip Compressed Archive |
|
Protected Zip Compressed Archive |
||
PRIM'X ZED Compressed Archive |
||
Executable |
Executable |
|
Dynamic Link Library |
||
Images |
Microsoft Windows OS/2 Bitmap Graphics |
|
Joint Photographic Experts Group |
||
Graphics Interchange Format |
||
Tagged Image File Format |
||
Microsoft Windows Metafile |
||
Microsoft Windows Icon |
||
Microsoft Windows Cursor |
||
Enhanced Microsoft Windows Metafile Format |
||
Portable Network Graphic |
||
Audio Video |
Moving Picture and Associated Audio/Video for digital storage media |
|
Resource Interchange File Format |
|
|
Advanced Streaming Format Files |
|
|
Standard MIDI File |
Musical Instrument Digital Interface |
|
RealNetworks |
|
|
Markup Languages |
Extensible Markup Language |
|
Rich Edit Text |
Rich Text Format |
|
Microsoft Windows Setup |
Microsoft Windows Installer File |
|
Microsoft Windows Installer Patch |
||
Microsoft Windows SDK Setup Transform Script |