Singularity Control can control any kind of USB device. Administrators can create highly granular control for any type of USB device as defined by the USB standard. Policy can be defined by vendor ID, product ID, serial number or by class of device which includes things like audio, printers, mass storage, smart cards, video devices, USB-C devices, personal healthcare devices, and more. For example, Singularity Control can only permit IronKey™ encrypted external thumb drives as well as certain audio headsets and deny everything else that is USB.

Yes. Policies can be crafted to permit read-only operation of mass storage USB devices.

Some use cases for Bluetooth control include:

• Restricting Bluetooth operation to only newer Bluetooth versions in order to reduce the attack surface contributed by older versions.
• Restricting Bluetooth connectivity from devices to a specified list or type of peripherals.

SentinelOne offers native OS firewall control for Windows, macOS, and Linux. Your security policies may require different local OS firewall policies applied based on the device’s location. For example, a more restrictive policy might be used outside the organization’s network vs. a more open policy inside the network. Administrators craft network location tests that help the endpoint automatically determine what network it’s connected to before applying the correct firewall policy.

Rogues is a feature that is included with Singularity Control and Singularity Complete. Its purpose is to discover whether there are hosts on the network that do not yet have the Sentinel Agent installed. Singularity Ranger is a module that helps you control your network attack surface. Ranger offers Rogue functions and adds extensive network discovery and fingerprinting of all IP-enabled devices. Ranger can also be used to protect SentinelOne devices from non-managed network-connected devices to ensure unauthorized lateral movement by an unmanaged device is disallowed.