User Guide
Overview
MetaDefender Kiosk helps protect your network by enabling control over the flow of data into and out of your organization. It can be used as a media scanning station on your own hardware or on OPSWAT's custom-made kiosks. Media such as USB devices, DVDs, SD cards, flash drives, or floppy disks are processed by MetaDefender Kiosk by inserting the media device into the appropriate drive. After the scan is complete, Kiosk generates a detailed report.
This user guide covers installing, configuring, upgrading, using, and troubleshooting MetaDefender Kiosk.
Key Features
Protection against zero-day attacks (MetaDefender Core integration)
Customized data security policies
Control over data flow
Active Directory authentication
Custom Authentication
Portable Media support including floppy disks, SD cards, CDs, DVDs, encrypted USB, and more
UI localization/internalization (comes with bundled language translations and the ability to manually add any other language)
Securely wipe USB drives
Easier system hardening
User authentication
MetaDefender Kiosk has the following authentication features:
Active Directory authentication
Supports 11.1. Custom Authentication Module
Peripheral media
MetaDefender Kiosk automatically detects multiple peripheral media insertions for the following media types:
USB devices*
CDs/DVDs/Blu-ray
Card readers
SD cards
Floppy disks
* Not all USB devices are currently supported. If you have a specific device you need supported, please contact OPSWAT support.
Encrypted USB devices
MetaDefender Kiosk can unlock encrypted USB devices with a given password and process its contents. Encrypted devices are not supported by OMVA. Kiosk supports the following encrypted USB devices:
| Device | Software Version | Firmware Version | Scanning | Wipe | File Handling (i.e. copy-to) | Detail |
|---|---|---|---|---|---|---|
| Avira-Iron-Drive I | InfoPure - 3.201812 | - |  |  | | |
| Biocryptodisk-ISPX | - | - | | - | - | |
| Buffalo RUF2-HSCT | PASSWORD - 2.67 | - | | | | |
| Buffalo RUF3-HSL | OPEN_HS - 2.58 | - | | | | |
| DataLocker Sentry 3 FIPS | 4.8.34 | 3.05 | | | | |
| Integral Courier FIPS 197 | 1.0.3.1 | - | | - | - | |
| Kanguru Defender Elite 30 | - | - | | | | |
| Kanguru Defender Elite 200 | 4.0.8.1 | - | | | | |
| Kanguru Defender Elite 300 | - | - | | | | |
| Kanguru Defender 2000 | 5.1.6.8 | - | | | | |
| Kanguru Defender 3000 | 5.1.6.6 | - | | | | |
| McAfee Complete Data Protection | 4.3.0.224 | - | | | - | McAfee File and Removable Media Protection client is installed on the system that MetaDefender Kiosk is installed. |
| Microsoft BitLocker | - | - | | | - | Supports BitLocker To Go using passwords. MetaDefender Kiosk does not support BitLocker encryption using key files, smart cards, or VHD (Virtual Hard Drive) BitLocker encryptions. |
| SanDisk Cruzer Enterprise FIPS Edition | 2.5 SDK 1.2.10.12 | 6.615 | | - | - | |
| SanDisk Cruzer Contour U3 based USB | 4.08 U3 Launchpad - 1,6,1,1 | - | | - | - | |
| USB Flash Security | 4.1.12.17 | - | | - | - |
Media handling
MetaDefender Kiosk's media handling features include the following:
Can process drives with multiple partitions
Can process full or partial media
Can wipe/format USB drives
Supports integration with MetaDefender Vault for uploading files for processing or uploading/downloading processed files
USB device soft eject
CD/DVD eject
Processing files
MetaDefender Kiosk uses MetaDefender Core to process files. MetaDefender Core has the following processing features:
Scanning with multiple anti-malware engines
Data sanitization
Application vulnerability detection
Heuristics for zero-day threats
Archive extraction
File type verification
Workflow engines
Processing session results
After processing media, MetaDefender Kiosk allows you to view detailed logs and print results.
Customizable interface
The MetaDefender Kiosk interface includes English, Arabic, Hebrew, Korean, Vietnamese, German, Japanese, Spanish and French translations; with the support of customizing or adding other languages.
System hardening
MetaDefender Kiosk comes with a variety of system hardening features for maximum security.
Disables autorun of inserted media
Users can only exit by pressing ALT+F4 and, if Kiosk is configured to require a password to exit, entering the exit password
User interface blocks direct access to the system to prevent the ability to copy & execute files
Runs automatically on system startup