GFi EndPointSecurity features the ability to control specific ports on client machines via Active Directory. Policy can be put in place to grant or deny users or groups of users access to USB ports, as well as other ports, such as firewire and other removable storage media.
We found this product to be an easy install with its almost fully automated installation wizard. However, the user interface was quite awkward to use. The interface is so simplistic it is almost confusing. There are many useful wizards that helped us create policy and add users to the policy, but it took some time to become acquainted with how to use the product. We did like the client deployment tool, which made deploying and updating policy quick and easy.
This product does have quite a bit of flexibility, with many device control features. With Active Directory integration, managing clients and policy is nicely centralized. EndPointSecurity does offer several nice features, such as more control over other devices beyond USB — media players, PDAs and many others. We found this to be a useful tool for endpoint security, but it is more of a Jack-of-all-trades rather than a focus on high-end USB security.
Documentation for this product is nicely laid out with a clear and organized structure. We found both the user manual and installation guide to contain a great amount of detail and several clear sets of instruction, labeled screenshots and charts. All documentation was easy to read and navigate.
A software maintenance agreement is required. The company website also includes a massive support area complete with product documentation, forums and a knowledge base. Also available for customers is live phone and email support.
A price of $625 for 25 computers ($25/computer) down to $3,750 for 500 computers ($7.50/computer), plus maintenance, puts this product toward the lower end of the pricing spectrum and makes it very reasonable for large enterprises.