Singularity™ Control

Yes. Policies can be crafted to permit read-only operation of mass storage USB devices.

Some use cases for Bluetooth control include:

• Restricting Bluetooth operation to only newer Bluetooth versions in order to reduce the attack surface contributed by older versions.
• Restricting Bluetooth connectivity from devices to a specified list or type of peripherals.

SentinelOne offers native OS firewall control for Windows, macOS, and Linux. Your security policies may require different local OS firewall policies applied based on the device’s location. For example, a more restrictive policy might be used outside the organization’s network vs. a more open policy inside the network. Administrators craft network location tests that help the endpoint automatically determine what network it’s connected to before applying the correct firewall policy.

Rogues is a feature that is included with Singularity Control and Singularity Complete. Its purpose is to discover whether there are hosts on the network that do not yet have the Sentinel Agent installed. Singularity Ranger is a module that helps you control your network attack surface. Ranger offers Rogue functions and adds extensive network discovery and fingerprinting of all IP-enabled devices. Ranger can also be used to protect SentinelOne devices from non-managed network-connected devices to ensure unauthorized lateral movement by an unmanaged device is disallowed.