ZlockTM Version 2.5
New Features - ZlockTM 2.5
Printer control and Shadow Copy
With Zlock 2.5, system administrators are able to monitor and manage access to local and network printers through device access policies that establish access privileges for users, a specific printer, or a group of printers. IT professionals now have the capability to ensure security policies are enforced by inspecting Zlock device access logs and any printed documents via shadow copies, which are saved as PDF copies of any files printed by the system.
CD/DVD Shadow Copy
Zlock 2.5’s added functionality includes the ability to audit and analyze documents and files copied onto CD and DVD storage media. Zlock’s shadow copy function copies and saves transferred files in a secure directory as separate and distinct files, eliminating the need for additional third-party programs to perform an inspection the image. The shadow copy functionality incorporated in Zlock 2.5 makes IT data auditing much easier and efficient, particularly in situations where the use of CD and DVDs are authorized and heavily utilized within the context of normal business operations.
Online/offline device access
As of version 2.5, implementation of the device access control was enhanced by giving system administrators the option to apply different device access privileges based on the type of client’s connection that is currently in use. This significantly expands the system management capabilities, allowing, for example, using any network printer if the client machine is connected to LAN and blocking use of any printing or other devices otherwise. This effectively limits the ability to move confidential corporate data by ways of external devices (USB, printers, CD/DVD drives, etc) without proper authorization when a user leaves the network perimeter.
Improved deployment
The new version significantly improves the system deployment. In Zlock 2.5, Zconsole (Zlock administration module) offers simplified centralized deployment of client-side software components, using an easy-to-follow wizard. Entered system configurations can be saved and replicated on any number of network workstations and laptops, providing system administrators with a consistent, repeatable and easily-managed way to distribute the software in large-scale corporate installations.
Granting device access by phone
As of this release, Zlock supports emergency phone requests to access and use an unsupported device when the network connection is not available. An administrator can quickly create a new access policy, then exchange one time secret pass codes with the user, resulting in the policy getting created on the client’s computer. The policy could be permanent or a onetime event. In the latter case, the system can block the device after it is disconnected from the computer at the end of the user’s session or within a specified period of time.
For example, a company’s policy may prohibit the use of unknown or unregistered USB devices, but a sales representative, working remotely, requests over the phone a onetime access to load contract details from client’s USB flash memory stick. Provided that proper authorization is obtained, the sales rep enters the onetime pass code given to him by the administrator and the connected device is enabled by the system.
Maintaining Zlock integrity
In the new release, Zlock improves monitoring and maintenance of its files and configurations. If any of Zlock components removed, modified, or tempered with, the system will switch to a “blocked” mode and will only be available for access by the administrator. This helps protecting Zlock from unauthorized changes made by users or malicious software.
Increased compatibility
Zlock added support for Windows 64-bit operating systems. This enables corporate users who have deployed 64-bit operating systems on their workstations to take full advantage of the Zlock 2.5 release.
At the same time, Zlock 2.5 offers backward compatibility supporting previous Zlock versions. This greatly simplifies IT staff efforts when upgrading to new versions in a phased managed fashion without loss of productivity.
