File Transfer Policy
Controlling which direction files may be copied on each computer.
Why direction matters
The most common way confidential data leaves a company is someone copying it onto a USB drive. Setting the transfer policy is the direct control against that, and it is separate from whether the device itself is allowed.
- Deny all transfers — nothing moves to or from devices, in either direction.
- Inbound only — files may be copied from a device to the computer, but not out to it. Good for machines that need to receive files but must not leak them.
- Outbound only — files may be copied to a device, but not read off one.
- Allow all — no direction restrictions.
The combination is what matters
Transfer policy and device permission work together. A read-only device already prevents writing to it; adding an inbound-only policy is what prevents copying off it. For the strictest setup, use both rather than relying on either one.
Changes apply immediately
The new policy reaches the computer within seconds. If someone was mid-copy, the file is stopped and the attempt is recorded.
How to use it
Stop Data Leaving A Computer
- What it does
- Preventing files being copied from a computer onto a USB device.
- Why you would use it
- This is the most common data-loss route, and it is usually unintentional.
- Where to find it
- Dashboard → Computers → your computer → Policy.
- Step by step
-
- Open the computer and go to its policy settings.
- Set the transfer policy to Inbound only, or Deny all if nothing should move either way.
- Also set the default device permission to Block if devices should not be usable at all.
- Save. The computer applies it within seconds.