Any kind! Administrators can create highly granular control for any type of USB device as defined by the USB standard. Policy can be defined by vendor ID, product ID, serial number or by class of device which includes things like audio, printers, mass storage, smart cards, video devices, USB-C devices, personal healthcare devices, and more. Here’s an example… only permit IronKey™ encrypted external thumb drives as well as certain audio headsets. Deny everything else that is USB.

Yes. Policies can be crafted to permit read-only operation of mass storage USB devices.

Case #1: Restrict Bluetooth operation to only newer bluetooth versions in order to reduce the attack surface present in older versions. Case #2: Restricting Bluetooth connectivity from devices to a specified list or type of peripherals.

SentinelOne offers native OS firewall control for Windows, Mac, and Linux. Your security policies may require different local OS firewall policies applied based on the device’s location. For example… perhaps a more restrictive policy is used outside the organization’s network vs. a more open policy inside the network. Administrators craft network location tests that help the endpoint automatically determine what network it’s connected to then applies the correct firewall policy accordingly.

Rogues is a feature that is included with Singularity Control and Singularity Complete. Its purpose is to discover whether there are hosts on the network that do not yet have the Singularity Sentinel agent installed. Ranger IoT on the other hand, is an add-on product that helps you control the network attack surface. Ranger offers Rogue functions and adds extensive network discovery and fingerprinting of all IP-enabled devices. Ranger can also be used to protect SentinelOne devices from non-managed IoT devices to ensure unauthorized lateral movement by an unmanaged device is disallowed.