Setting Time Limits for Temporary Unlock and Suspending Restrictions

In some scenarios you will want to allow temporary unlock. However that unlock may require a restriction to the elements that can be unlocked or the time in which it can be done.

When connected to an endpoint via the Managment Console:

You will have the option of Unlock Wizard.

You are presented with a number of options on the unlock process.

 

You can define the period or time until which this temporary unlock is valid. The unlock is even maintained during a computer restart, e.g. if you temporarily unlock USB drives for the next three days, the computer can be rebooted in between.

When you unlock drives, you can select the following options to temporarily additional restrictions:

  ·  Disable file filtering and auditing during unlock period: Users can read and copy files that would normally be blocked based on file filtering rules. No auditing of file access is performed.
  ·  Unlock encrypted portions of encrypted drives: Allow access to unencrypted portions of drives that are encrypted using Encryption 2-Go. Commonly the Mobile Encryption Application (MEA) is stored on an unencrypted portion of such a drive.
  ·  Force accepting usage policy before drive can be accessed : The user must agree to a configured usage policy before the drive is unlocked.

These options are available for other modules:

  ·Disable web security (URL filtering) during the unlock period: Disables the Web Security module during an unlock (if licensed).

Click Next.

If you are using application control, you can specify settings here so applications can be disabled during unlock. You also specify whether and which application files are added to the local hash database during this unlock period.

Use the "Require user approval for all files after unlock period ends" option to check the "learned" applications manually after the unlock is finished before they are added to the local application database and thus unlocked.

Click Next.

 

Finally, select the required unlock period, either in minutes or up to a specific date and time.

 As administrator, you can also enter a text (for example, the reason for unlocking) at this point. This text is also stored in the event and can be evaluated via reporting.