The release of VMware ESXi 5.0 makes it possible to plug USB storage devices to a physical machine and have them connected to a virtual machine hosted on top of the ESXi server.
Since WFBS comes with the Device Control feature that controls and manages access to USB storage devices (32-bit OS only), the Device Control can be used in a virtual machine protected by WFBS.
To use the Device Control in a virtual machine protected by WFBS:
- Add a "USB controller" in the VM configuration to have the USB device available inside the virtual machine.
- Right-click the virtual machine and select Edit settings from the menu that appears.
- Click Add and select USB controller with default values.
- Once added, make sure that the guest OS on the VM recognizes the new peripheral in the system. This can be done even when VM is already running.
- Connect the local USB device to the VM using the button provided in the vSphere client.
Click image to enlarge.Allowing or disallowing specific USB devices using the device ID that is unique for each device is possible with WFBS. The ListDeviceInfo tool is run on the VM and the USB storage device is normally identified as how it would run on a normal computer.Click image to enlarge.Because Device Control is set to list content in the USB device, WFBS agent was able to intercept and block the attempt to open files inside the USB device.Click image to enlarge.