Reflex Disknet Pro Client automatically detects and integrates with compatible anti-virus scanners. A database of compatible anti-virus scanners is stored in a file ‘avirdef.cab’ located in ‘system drive\program files\common files\reflex’. Reflex Magnetics Ltd offer frequent updates to the Avirdef.cab when new compatible AV scanners become available. If there is a particular scanner that is requires integration please contact the Reflex support department for up to date information .

The information below is logged for each event that a given user's profile is set up for: An ID Number, Date/Time of Log Event (mm/dd/yyyy hh:mm:ss xM), Host Name (machine name), Operation Type (Move/Rename, Create, Delete, etc.), Filename1, Filename2, Process (task that caused the event), User (Fully qualified login name), Alert (yes or no)

Reflex Disknet Pro can be run on MS Windows NT, 2000 & XP.

Both MS Windows & ME were not designed to be secure operating systems and therefore have no underlying security structure. This makes the securing of these systems impossible. A legacy version of Reflex Disknet for MS Windows 9x/Me is available on request.

Reflex Disknet Pro is a security enhancement for MS Windows NT, 2000 & XP. It is designed to protect against breaches in your security from both outsider and insider attack.

No Reflex Disknet Pro’s boot protection mechanism is designed to prevent this type of attack.

Reflex Disknet Pro ensures that all removable media I/O devices are authorised before use is granted. In this way “plug ‘n play” remains active but any device identified by the system will require authorisation before access is granted.

This is a policy decision you can make. You may like to grant users the right to authorise media that contains only data for instance, retaining the right to authorise media containing executable code to that of the Reflex Disknet Pro administrator. Or you could give users the right to authorise any media. In either case a virus scan will be performed as part of the authorisation process along with a log entry in Reflex Disknet Pro’s audit log of events.

Yes Reflex Disknet Pro has a module called Program Security Guard (PSG) this module is designed to stop the creation of any new executable file on either the hard disk or network drive.

Reflex Disknet Pro has two ways of accommodating this type of scenario. Firstly files can be explicitly exempt from the PSG process (a central secure database of these files is maintained by the Reflex Disknet Pro administrator). Secondly new software can be installed using a software deployment tool such as Reflex Deployment Server or SMS, these system administrator operated tools will already have been given the right to perform their tasks whilst PSG is active.

Yes it is possible to deploy Reflex Disknet Pro pre-configured across a LAN using software deployment tools such as Reflex Deployment Server, SMS, Altiris or direct from Active Directory via Group Policy Objects. Reflex Disknet Pro is fully MSI enabled.

All of the security settings are arranged into “security profiles” and these are applied to a user or group of users (system groups can be imported for this purpose). This way we can apply the appropriate security to a user wherever he/she logs onto the network. The security management is accessed by the Reflex Disknet Pro administrator from an MMC console located on the network. Settings can be applied or re-configured dynamically across the network from this console.

Yes you can have any number of administrator consoles each will communicate with the Reflex Disknet Server module via a secure authenticated link.

Yes Reflex Disknet Pro has full auditing capabilities and alerts can be configured to be sent via e-mail to the Reflex Disknet Pro administrator or security officer for example.

Reflex Disknet Pro will integrate with any AV product that it recognises, using this product to scan media as part of the authorisation process. If you do not currently have AV protection Reflex Disknet Pro is shipped with a copy of Reflex Sherlock (update to this AV scanner must be arranged).

Yes this type of user is catered for byway of a “secure .ini” file, which can be time limited so that regular updates to the security settings can be achieved. These updates can occur either when the user next logs onto the network or by the application of the new file from diskette or e-mail.

Yes Reflex Disknet Pro allows the administrator to control access to the following ports; .COM, .LPT, IrDA and generically block access to USB removable media.

Yes Reflex Disknet Pro includes a license for Reflex ScreenMail, this MS Outlook/Outlook Express security plug-in is automatically installed if these Microsoft e-mail clients are detected.

The setting for DataScan are stored in a configuration file called checkdat.xml. For further information about changing the contents of this file please contact the Reflex Magnetics Ltd support department on

Reflex Magnetics Ltd provide a full training and installation service. For further information please contact Reflex Magnetics

Reflex Disknet Pro client is supplied with the Reflex Data Authorisation Enterprise Scanner. During installation of the client software there is an option to install this component. The Reflex Data Authorisation Enterprise Scanner will only authorise data only files, any files containing executable or active code will be blocked.

If the Reflex Data Authorisation Enterprise Scanner was installed on Reflex Disknet Pro Client workstations during installation then by default users are unable to authorise media containing executable code. There are two methods of allowing authorisation of executable code. The user can be permitted to select an AV scanner to authorise media thus enforcing only virus free file types can be authorised irrespective of their executable content. The user can bring all media containing executable to dedicated IT personnel who can verify the media contents before authorising.

It is possible to create a Reflex Disknet Pro ‘emergency access disk’ which allows the system administrator to disable all Reflex Disknet Pro Client drivers.

Reflex Disknet Pro includes an advanced PSG exemption mechanism. The software distribution package needs to be added to the exempt applications list.

Reflex Disknet Pro supports many of the leading software distribution packages by default. The software is shipped with a default list of exempt applications which can be amended to include new applications.

Reflex Disknet Pro Client can be silently deployed using any software distribution tool including MS SMS 2.0 and is fully MSI compatible. The preferred method for client installation is using Reflex Deployment Server.

If this problem occurs the following should be checked: The profile being changed is the correct profile assigned to that particular group of users. The Reflex Disknet Pro Enterprise Server service is running. The client workstation(s) is connecting to the connecting to the correct Enterprise Server. For further diagnostic tools please contact the Reflex technical support department .

It is possible to view a users profile for testing purposes by right clicking the Reflex Disknet Pro Client icon and selecting ‘Options’: From the options dialogue press ‘Ctrl+Shift+F6’. The user profile is displayed: For further information about the Reflex Disknet Pro Client profile please contact the Reflex Magnetics Ltd support department

The special users group is created for users that require individual profiles. To grant a user special rights complete the following steps: Select the user you wish to assign a special profile, right click and select ‘properties’. Edit the custom profile as required. The user will automatically be moved to the ‘Special users’ group.

Reflex Magnetics Ltd provide frequent updates to the default list of exempt applications, (expreset.ini). These can be obtained from reflex-magnetics.com.

To setup a Reflex Disknet Pro Client profile without the ability to authorise media the ‘Allow users the following rights (wizard mode)’ option should be selected with none of the sub options selected from within the Removable Media Manager Profile tab.

To setup a standalone sheep dip machine a new profile should be created on the Enterprise Server. The ‘export profile template’ option should then be used to create an installation template. The client software can then be installed using the template profile settings.

For further information about setting up Reflex Disknet Pro Client software using Sophos Anti-Virus please contact the Reflex support department .

Program Security Guard can be used to block the introduction of unwanted file types from any source. To add a new file type select the ‘PSG types tab’ in the required profile and add the new extension MP3.

During installation of Reflex Disknet Pro Client it is possible to specify 2 or more server names for backup purposes. The servers can be contacted either randomly or in order.

It is possible to customise the Reflex Disknet Pro Client message alert boxes to a corporate image. By placing 400x300 pixel copies of the following files in the Reflex Disknet Pro Client installation folder it is possible to customise the Removable Media Manager and Program Security Guard message boxes: Program Security Guard – psgbmp.bmp Removable Media Manager – rmmbmp.bmp

Yes it is possible using the "media revocation" feature full details can be found by searching the online help files using the "media revocation" search string.

Reflex Disknet Pro has a number of features to protect against the introduction of malicious code. Program Security Guard can be used to block the introduction of any unauthorised executable/active code. For example, by blocking the introduction of .exe files it is possible to block all trojans and worms. This provides a generic protection against threats like the MS Blaster and SoBig worms.

Reflex Disknet Pro Client has been designed to operate even if the server is unavailable. When the client software connects to a server a secure profile is downloaded. This profile is cached and will be used in the event of the server being unavailable. A failsafe default profile is used if no connection has ever been made.

Yes, we define devices that can support a file system differently to say card readers, mouse and keyboard connections. Therefore it is possible to allow access to all non media devices whilst blocking those that are capable of storing data or programs.

Reflex Disknet Pro can be supplied with the Encryption Policy Manager(EPM). EPM provides transparent encryption of removable media. Encrypted media cannot be accessed externally without Administrator authorisation thus stopping data loss/theft.

Worms and Trojans are simply programs written to perform malicious attacks on computer system and then designed to replicate onto other unprotected systems. By default the Program Security Guard (PSG) component of Reflex Disknet Pro blocks the introduction of any unapproved executable code.

Reflex Disknet Pro Client can be installed as part of a cloned drive image. Please see the knowledge base article titled 'Installing Reflex Disknet Pro using drive imaging software' for further information.

Because Reflex Disknet Pro uses kernel mode system drivers it is closely integrated within the operating system and thus cannot be stopped even with local admin rights.

Right mouse click on the Reflex Disknet Pro Server on localhost node at the top of the Disknet administration console and scroll down to Properties. The Reflex Disknet Pro Server dialog box will then appear. This dialog is used to view Reflex Disknet Pro Server information such as Server version, Build, License information.

Right mouse click on the Reflex Disknet Pro Server on localhost node at the top of the Disknet administration console and scroll down to Properties. The Reflex Disknet Pro Server dialog box will then appear. This dialog is used to view Reflex Disknet Pro Server information such as Server version, Build, License information. Click on the Reflex Disknet Pro icon in the system tray on the Client Workstation and scroll up to About. This will display the Reflex Disknet Pro client version.