SafeConsole PortBlocker by DataLocker is an endpoint security and USB data loss prevention (DLP) module that controls workstation access to USB mass storage and optical drives on Windows and macOS systems, including non-persistent virtual desktop infrastructure (VDI) environments but excluding ARM processor-based systems. The software operates through a device driver, system service, and client interface architecture, running continuously in the background to enforce device control policies that automatically block unauthorized removable media. Administrators can configure whitelist rules based on vendor ID (VID), product ID (PID), and serial numbers, and assign permanent, time-bound, or read-only permissions to specific users, groups, or devices. The module includes a Background Stealth Mode to conceal the client interface, an Audit Mode that logs connections without restricting access, and supports proxy configuration for network traffic control.
The software is managed centrally through the SafeConsole platform, with endpoints registering via connection tokens to enable policy assignment, system proxy management, automated license acceptance, uninstall password enforcement, client interface visibility control, and data export in XML or CSV formats. Deployment is supported through standard enterprise tools including MSI packages, Group Policy, PDQ Deploy, and command-line arguments for Windows, and Jamf, PKG installers, and configuration profiles for macOS versions 12.x through 14.x, with local administrator privileges required for installation. PortBlocker generates detailed audit logs of all USB connection events and policy modifications, supporting SIEM ingestion for network security analysis and regulatory compliance frameworks including PCI-DSS, HIPAA, CMMC, and SOX.
