Connect Protect uses filter drivers to allow/deny access to devices. Depending on policy, any external device may be connected, but not accessible, unless the machine or user has permission to do so. Connect Protect also allows the signing of removable media, allowing an administrator to sign any removable media device and prevent access to media that has not been signed. The product can also make use of Active Directory group polices, allowing simple and familiar management of the product and the policies across organisations. All user and machine events can be logged (even if the device has not been blocked) allowing an administrator to closely monitor the external devices that are being connected to machines on the network.