JumpCloud is thrilled to announce the return of USB Blocking on macOS, starting today! This crucial technology represents a step forward for JumpCloud through implementing Endpoint Security framework from Apple to provide responsible blocking for storage devices, and paving the way for future security improvements. Admins can now block external storage volumes connected over USB, Thunderbolt, or even SD Card readers with one simple policy, powered by the JumpCloud Agent and controlled over MDM.
This key advance in JumpCloud’s functionality is available immediately.
End users who connect an external storage device to a Mac with a USB External Storage Restriction Policy bound will not be able to mount any volumes from the device in the Finder, or via the command line. Devices that are not storage devices will continue to work as they have previously, so external keyboards and mice, as well as other control and input devices, will continue to work as usual.
Every environment is different, and every organization needs to protect the data that they collect to make sure that it doesn’t leave where it’s permitted to be. In some organizations, that data can include payment card information, personally identifiable information, or even medical records and other similarly sensitive data. The cost of data compromises like this can be substantial, from regulatory fees to insurance costs to lost customers and lost trust.
For those that want to set this up immediately, this functionality is available in version 1.188.0 of the Agent. It is controlled through an MDM policy in the Mac USB External Storage Restriction Policy available today!
This functionality works on all supported versions of macOS at JumpCloud.
We’re very excited to put this key security control back in the hands of JumpCloud admins, and can’t wait to hear your feedback.
Frequently Asked Questions
What kind of USB Devices are blocked with this policy?
This policy applies to attached storage volumes only. Storage volumes include thumb or jump drives, backup hard drives, externally attached storage arrays, and other disk interfaces.
What happens if you try to connect a keyboard or mouse to a device that has this policy?
Interface devices, like keyboards, mice, trackpads, printers, and scanners are not affected by this policy, and will connect as normal.
If a USB device is connected when this policy is activated, what happens?
Any drive that is attached when this policy is activated will stay mounted until the drive is removed, or the system is restarted.
If a USB device is connected and disregarded while this policy is activated, what happens when the policy is deactivated?
Nothing, until the volume is manually mounted, the disk detached and reattached, or the device restarted.
Where can I read more about this?
We've published a Help Center Article on Creating Mac USB External Storage Restriction Policies
