Release Date: July 31, 2015

Key features in this release include support for the filter and the ability to restrict usage of the USB Removable Storage Devices such as USB Thumb Drives and USB Hard Drives.


Please contact iSheriff Technical Support Team for further assistance.

USB Manager for iSheriff Cloud Endpoint Security


Important: USB manager will only enable/disable Mass Storage devices


The manager must be enabled in the Dashboard Policy:




Endpoint local manager allows for the authorization of specific USB devices :





Three devices are connected here, none of them are in the authorization list.


Every device starting with a ‘red’ column is disabled:



When you connect a device that is not authorized, Endpoint will disable it and show a warning via the users desktop (unless popup messages are disabled):





Endpoint will allow authorized devices to run.

Every device starting with a ‘green’ column is enabled and connected:



If USB Manager is not enabled in the users policy, you will still have a chance to manage local devices. This is to ensure that devices that were previously allowed remain allowed in the event that the USB Manager is re-enabled.


Note: when Policy USB Manager is not enabled, you will not have the ability to disable devices.



New log data


A new log file will be generated under log folder: usb.log.





2015/07/30 21:35:20 request device: USBSTOR\DISK&VEN_SAMSUNG&PROD_M3_PORTABLE&REV_3_\00000000011E0BA9&0

2015/07/30 21:35:21 USB device has been enabled

2015/07/30 21:35:48 request device: USBSTOR\DISK&VEN_SAMSUNG&PROD_M3_PORTABLE&REV_3_\00000000011E0BA9&0

2015/07/30 21:35:48 USB device has been disabled

2015/07/30 21:36:12 request device: USBSTOR\DISK&VEN_SAMSUNG&PROD_M3_PORTABLE&REV_3_\00000000011E0BA9&0

2015/07/30 21:36:12 USB device has been enabled

2015/07/31 08:01:55 request device: USBSTOR\DISK&VEN_SAMSUNG&PROD_HD502HJ&REV_\20B9BB07450F&0

2015/07/31 08:01:57 USB device has been disabled


System log will also store several USB data information.




+ [2015/07/31 08:00:46] Current Policy: Montevideo R&D office [jorge] -Policy change detected-

- [2015/07/31 08:01:55] USB device connected: USBSTOR#Disk&Ven_SAMSUNG&Prod_HD502HJ&Rev_#20B9BB07450F&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

- [2015/07/31 08:01:55] USB device id: USBSTOR\DISK&VEN_SAMSUNG&PROD_HD502HJ&REV_\20B9BB07450F&0

- [2015/07/31 08:01:55] USB device name: SAMSUNG HD502HJ USB Device

- [2015/07/31 08:01:55] USB device not authorized; locking device

+ [2015/07/31 08:01:55] Running command: endpoint usb

- [2015/07/31 08:01:57] USB device disconnected: USBSTOR#Disk&Ven_SAMSUNG&Prod_HD502HJ&Rev_#20B9BB07450F&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

- [2015/07/31 08:04:57] USB device connected: USBSTOR#Disk&Ven_USB2.0&Prod_CARD-READER&Rev_1.01#8120420080429000&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

- [2015/07/31 08:04:57] USB device id: USBSTOR\DISK&VEN_USB2.0&PROD_CARD-READER&REV_1.01\8120420080429000&0

- [2015/07/31 08:04:57] USB device name: USB2.0 CARD-READER USB Device

- [2015/07/31 08:04:57] USB device found in custom Authorized Devices; no action taken


A new module is going to be automatically installed by Endpoint under tool folder: endpoint_usb[32/64].exe.

That module is responsible for USB device locking/unlocking and will be started by Endpoint on demand.



Backup language


This release also includes a new feature: backup language for translations.

The backup language is standard English, and will be used for other languages when translation is not available.

Next window shows a sample using French language and missing definitions for USB screen:




System log will show a line about backup language:



  • This version also include several bug fixes with language pack.



Note: The USB manager is only available for Windows in this release.