our UltraBlock USB Manual
Contents
1. 13 UltraBlock USB User Manual ili Package Contents The following is included with the UltraBlock USB e UltraBlock USB 1 e Power Supply and power cord 1 e FireWire Cable 6 pin to 6 pin 1 e USB Cable A to 5 pin 1 e User Guide 1 gt Digital Intelligence What is the UltraBlock USB The UltraBlock USB is a hardware based write blocker that allows a USB mass storage device i e flash drives thumb drives external USB hard drives etc to be connected to a personal computer for forensic image acquisition and analysis The UltraBlock supports connection to the Host pc via FireWire400 1394A or USB 2 0 interfaces By using the UltraBlock USB data can be read from the USB mass storage device without data being inadvertently modified during the acquisition and analysis 1 2005 Digital Intelligence Inc zTABLEAU Forensic USB Bridge DCIN ON OFF Switch FireWire host USB 2 0 USB 2 0 hos 1 device LCD Contrast Buttons LCD Display Adjustment DC IN The DC IN connector on the UltraBlock USB is compatible with the output of the UltraBlock power supply ON OFF Switch The ON OFF switch controls power to the UltraBlock USB and USB device attached to the USB 2 0 device connector FireWire host FireWire400 1394A connector Used when connecting the UltraBlock USB to a host computer via FireWire 1394 USB 2 0 host USB 2 0 connector Used when connecting the Ultra2. nf o C28 S 6 P 50 Information about how the UltraBlock USB is internally managing the nt Node I D 1 USB device J USB addressz2 SCSI device class of the USB device e g SCSI class 0 disk device SCSI class 0 Di sk 7 2005 Digital Intelligence Inc When viewing these screens be aware that the UltraBlock USB will truncate strings to the first 16 characters If a string is longer than 16 characters the UltraBlock USB will only show the first 16 This is important to remember when reviewing information such as device serial numbers as serial numbers longer than 16 characters will not be fully displayed USB TECH INFO The USB Technical Information menu provides information used when troubleshooting devices that are not properly recognized by the UltraBlock USB This information may assist technical support personnel Internal device speed HS FS LS Dev or Hub and device mfg name Dev12HS Dev 1 8 SanDisk Corporat Dorce model Svice MODE name Dev4 HS Dev 2 8 Cruzer Micro Devi ial b ds Deyts pew 378 SNDKAAC6 C42 A25 DO Vendor ID VID and Product ID PID of the USB device Dev12HS Dev 4 8 VI D 781 PI D 5151 Class subclass and protocol of the USB device Dev1 HS Dev 5 8 C 8 S 6 P 50 USB revision in BCD and number of configurations supported by device Dev1 HS Dev 6 8 USB 20 Cf gs 1 Current requirements of the attached USB device Dev1 HS Dev 7 8 Max pwr 200mA Info
3. 2 782 3332 F 262 782 3331 2005 Digital Intelligence Inc All rights reserved
4. Block USB to a host computer via USB 2 0 USB 2 0 device Plug the device to be write blocked into the USB 2 0 device connector LCD Display The LCD display shows the current status of the UltraBlock USB including whether or not a USB device has been suc cessfully recognized by the UltraBlock USB Using the UI traBlock USB buttons see below the user may also navi gate additional information screens shown on the display The LCD contrast is already set for normal viewing when the Contrast Adjustment UltraBlock USB is shipped from the factory However you may need or want to adjust the LCD contrast to suit your preferences or work environment To adjust the LCD contrast carefully insert a 40 phillips head screwdriver in the hole as shown in the above image To make the dis play darker rotate the screwdriver counter clockwise To make the display lighter rotate the screwdriver clockwise Buttons The UltraBlock USB has two buttons Menu and Enter These two buttons may be used to navigate additional infor mation screens on the LCD display The arrangement of information viewable on the LCD display is described later in this document UltraBlock USB User Manual 2 Power Considerations UltraBlock is powered via the 5 pin DIN connector from the UltraBlock Power Supply The device is turned on using the ON OFF switch on the side of the unit UltraBlock Cabling You should only select a single cable interface to co
5. I reserves the right to modify its warranty statement at any time in its sole discretion DI will be obligated to honor any such warranty only upon DI s receipt of payment in full for the product to be warranted Obtaining Warranty Service You must notify DI within the warranty period to receive service covered under this war ranty Information on warranty service is available at DI s Technical Support line 262 524 9363 If the DI representative determines your product is eligible for warranty service you will be required to return it to DI shipping prepaid along with proper identification a return authorization number provided by the representative and proof of purchase Limitations THE ABOVE WARRANTY IS EXCLUSIVE AND IN LIEU OF ALL OTHER WARRANTIES EXPRESS OR IMPLIED TO THE EXTENT PERMITTED BY APPLICABLE LAW DI SPECIFICALLY DISCLAIMS ANY IMPLIED WARRANTIES INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE Any implied warranty required by applicable law shall be limited in duration to the express warranty term Some states do not allow disclaimers of implied warranties or limitations on how long an implied warranty lasts so the above limitation may not apply to you This warranty gives you specific legal rights and you may also have other rights that vary from state to state Any suit for breach of any warranty on your Product must be filed within one 1 year of the first date the suit could have bee
6. STABLEAU Forensic USB Bridge DC IN Power Host Detect Write Block Activity ISOH annan Device Detect e gt Digital Intelligence NOTICE No part of this manual including the products and software described in it may be reproduced transmitted transcribed stored in a retrieval system or trans lated into any language in any form or by any means except documentation kept by the purchaser for backup purposes without the express written permis sion of Digital Intelligence Inc DI DI PROVIDES THIS MANUAL AS IS WITHOUT WARRANTY OF ANY KIND EITHER EXPRESS OR IMPLIED INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE IN NO EVENT SHALL DI ITS DIRECTORS OFFICERS EMPLOYEES OR AGENTS BE LIABLE FOR ANY INDIRECT SPECIAL INCIDENTAL OR CONSEQUENTIAL DAMAGES INCLUDING DAMAGES FOR LOSS OF PROFITS LOSS OF BUSINESS LOSS OF USE OR DATA INTERRUPTION OF BUSINESS AND THE LIKE EVEN IF DI HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAM AGES ARISING FROM ANY DEFECT OR ERROR IN THIS MANUAL OR PRODUCT Product warranty or service will not be extended if 1 the product is repaired modified or altered unless such repair modification of alteration is authorized in writing by DI or 2 the serial number of the product is defaced or missing Products and corporate names appearing in this manual may or may not be registered trademarks or c
7. Status Display differs from other informational displays by automatically cycling through each of its information screens When a USB mass storage device has been properly recognized the Status display will automatically rotate among the following informational screens Copyright Notice PTS Tableau T8 c 2005 Tabl eau Indicates the USB device has been successfully recognized USB devi ce Recogni zed OK Manufacturer name of the USB device Mfg name SanDi sk Model product name of the USB device Product name Cruzer Micro Capacity in sectors of the USB device Sector count 1 000 944 NOTE Some USB mass storage devices do not return a manufacturer or model product name In these cases the display will state No Str Available UltraBlock USB User Manual 6 DEVICE INFO The Device Information menu lets the user examine additional information about the USB device attached to the UltraBlock USB Indicates the USB device was suc cessfully recognized USB device Recogni zed OK Manufacturer name of the USB device Mfg name SanDi sk Model product name of the USB device Product name Cruzer Micro Serial number of the USB device i Serial SNDKAAC6 C42 A2 5 D0 Firmware Revision of the USB device Firmware rev 0 2 The speed of the USB device high full or low USB speed High 480mbit s USB class information C class S subclass P protocol USB class i
8. The Enter button advances to the first informational screen for that menu item If an informational screen is 288 currently displayed then the Enter button advances to the next informational screen within the same Main Menu se lection POWER ON When the power switch is turned ON the UltraBlock USB displays the following screen Initializing please wait While this screen is displayed the UltraBlock USB performs an internal diagnostic During the diagnostic the Host Detect Write Block Activity and Device Detect LEDs flash ON in sequence At the end of the diagnostic the UltraBlock will illuminate the Write Block LED MAIN MENU After the power ON diagnostic is complete the display defaults to the Status Display To view the Main Menu press the Menu button once Pressing the Menu button repeatedly displays the following sequence of Main Menu selections Status Display Device Information Display i Main Menu USB Device Info 5 2005 Digital Intelligence Inc USB Technical Information Display Main Menu USB Tech Info UltraBlock USB Information Displa pe Main Menu T8 Bridge Info Pressing the Enter button while any of these screens are displayed advances the display to the first of the informational screens for that Menu STATUS DISPLAY The informational screens in the Status Display alternate between the copyright notice and information about the USB device attached to the bridge The
9. e r CD 2 Row x 16 Column monochrome LCD character display Buttons Two Menu and Enter buttons for navigation Other Features Write Blocking Write blocking is permanently enabled in UltraBlock USB Status LEDs 6 LEDs DC IN good Power ON Write block enabled Activity USB device detect Host detect LCD Contrast Control LCD contrast adjustment via externally accessible potentiometer mu E Compatibility USB Device USB devices must conform to the USB Mass Storage Class Specifica tion and must implement the Bulk Only Interface Protocol Host Interface FireWire400 or USB 2 0 Host O S Windows XP 2000 newer Macintosh OS X most Linux distributions note Linux distributions have varying levels and quality of support for FireWire 1394 and USB2 0 Physical Environmental Power 2 5 watts typical operating not including USB device Supply voltage DC IN 5VDC 2A includes budget for USB device Output voltage DC OUT 5VDC Q 1 5A max Dimensions 5 75 in L x 3 25 in W x 1 125 in H Weight 5 90z 1669 Operating temperature range 0 to 55 degrees C no airflow Storage temperature range 40 to 70 degrees C Relative humidity Up to 90 non condensing Warranty One year parts and workmanship from date of purchase 13 2005 Digital Intelligence Inc www digitalintelligence com Digital Intelligence Inc 17165 W Glendale Drive New Berlin WI 53151 P 26
10. empt to update write to an NTFS FAT file system the first time the volume it is attached to a system In the event that Windows tries to perform this update the write attempts to the drive will be blocked This will prevent Windows from providing logical disk access to the attached NTFS FAT file system effectively resulting in an NTFS file system for which no drive letter is assigned This condition is a function of the Windows NT 2K XP operating system and happens specifically because the Write Blocker is performing properly Although logical disk access will not be provided the drive will still be able to be forensically imaged at the physical level Firmware updates f there is a need to update firmware please consult the Digital Intelligence web site support pages located at http www digitalintelligence com support php UltraBlock USB User Manual 12 UltraBlock USB Technical Specifications Product UltraBlock USB Forensic Bridge Tableau Model T8 Connectors FireWire One 6 pin FireWire400 1394A USB to host One USB Mini B 5 pin USB2 0 high full low speed USB to device One USB A 4 pin USB 2 0 high full low speed DC Input 5 pin mini DIN for use with the UltraBlock power supply o 3 o gt D o Turns power ON OFF to UltraBlock USB and attached USB device 4 position DIP switch selects field configurable options DIP Switches can be accessed by removing a knock out panel ao UE 29 23 O J User Interfac
11. g system in Read Only mode They are intended for diagnostic operations and to help support operating systems which do not fully support read only devices Switch 2 controls whether an error code is returned when a write is attempted If the switch is OFF an error will be generated when a write is attempted If the switch is ON a success code will be returned to make the operating system believe the write was successful Switch 3 controls what type of code page device characteristics is reported to the calling process when a device query is made If the switch is OFF the code page reported indicates that the device is write protected If the switch is ON the code page indicates the device was not write protected The following table summarizes the recommended configuration depending on the operating system you are using Windows XP In most situations Windows XP handles READ ONLY bridges correctly and will work optimally when leaving switches 2 and 3 in the OFF default state If you encounter a situation in which Windows XP reports that a volume is write protected and will not allow you to access the partition then try the switch setting recommended for Windows 2000 below Windows ME 98se ON Windows ME 98se may not recognize that a bridge is READ ONLY and may attempt to write to the bridge anyway If this happens Windows ME 98se will generate a blue screen error These settings eliminate the blue screen error Window
12. is warranty does not apply to i DI software products ii expendable components such as power cables FireWire USB or UDMA cables or iii third party products hard ware or software supplied with the warranted product DI makes no warranty of any kind on such products which if included are provided AS IS THIS LIMITED WARRANTY DOES NOT COVER AND SHALL AUTOMATICALLY BECOME NULL AND VOID FOR ABUSE MISUSE UNUSALLY HEAVY USE ACCIDENT OR IMPROPER STORAGE INSTALLATION APPLICATION OR MAINTENANCE Remedies Your sole and exclusive remedy for a covered defect is repair or replacement of the de fective product at DI s sole option Any replacement parts or products will be new or ser viceably used comparable in function and performance to the original part or product If DI is unable to repair or replace a defective product your alternate exclusive remedy shall be a refund of the original purchase price less depreciation The above is DI s entire obli gation to you under this warranty DI SHALL UNDER NO CIRCUMSTANCES WHETHER FOR A FAILURE OF ITS LIMITED REMEDY OR OTHERWISE BE LIABLE FOR SPE CIAL INCIDENTAL DIRECT PUNITIVE OR CONSEQUENTIAL DAMAGES EVEN IF DI HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES In no event shall DI s liability exceed the original purchase price Some states do not allow the exclusion or limitation of incidental or consequential damages so the above limitation or exclusion may not apply to you D
13. n brought NO WAIVER ALTERA TION ADDITION OR MODIFICATION OF THE FOREGOING CONDITIONS SHALL BE VALID UNLESS MADE IN WRITING AND SIGNED BY AN OFFICER OF DI There are no serviceable parts inside the UltraBlock Do not attempt to open or disassem ble the UltraBlock device due to an electrical shock hazard Opening or disassembling the UltraBlock case except at the request of DI Technical Support will void the warranty li 02005 Digital Intelligence Inc TABLE OF CONTENTS Package NN 1 Whatis the UMPaBlOCK USB cccaiontncscatedesiicendsesnetccensacaledecunanetnesasiacsoagest 1 Power Considerations ccccccccsssesececeeeeeeeeeeeeeeeeeseaeeeeeeeeeessaaeseeeeeeees 3 CUT US TOG Ke Go go RIDERE EO TT 3 Diagnostic LED ln en eeE 3 BLE SEE EE EE 3 9 OM 3 Attaching th UltraBlock USB sci swisscacstccessicsgtoussccancnmegcaneleccuansenedesmosseal 4 Changing USB Devices ccccccceecceseeseeeeeeeeceeeeeeeeeeesseaaaaeeeeeeeeeeeaas 4 Disconnecting the UltraBlock USB eeeeeeeeeeeeeeeeee 4 oe A 5 Modifying your UltraBlock Capabilities eesssssssse 10 Summary of Switch Settings xcti ua cert ee pere pat yn tt dt ecu tar npa 11 Important Considerations sseeeseeesseseeeeennnnnnenennnnn nne 11 UltraBlock USB Technical Specifications
14. nnect the UltraBlock to your PC Select EITHER a FireWire400 or USB connection on the UltraBlock Diagnostic LED s The DC IN LED indicates the unit is receiving power from the attached power supply The Host Detect LED indicates the connected PC interface is properly detected The Power LED indicates the unit is receiving power and the power switch has been turned on The Write Block LED indicates the status of the write protect mode The LED is illuminated when the device is in Read Only mode If the UltraBlock USB is attached to the PC via the FireWire interface it will flash when an attempted write is blocked The Activity LED indicates device activity NOTE There is an important difference between the UltraBlock USB and other UltraBlock forensic bridges The UltraBlock IDE UltraBlock SATA and UltraBlock SCSI bridges can be switched between read only write block and read write modes of opera tion the UltraBlock USB is permanently configured for read only write blocked operation SSS Drivers No device specific drivers are required for the UltraBlock Full driver support is provided by the host operating system and or interface controller FireWire or USB Adapter Normally the required drivers will automatically be loaded by the operating system Note that Windows 98 does not natively support USB Storage Devices Refer to your Operating System Motherboard or Host Adapter manufacturer for additi
15. official USB specification Unfortunately these front panel connections are usually not as reliable as the direct to the circuit board USB connectors typically found on the motherboard or hub If you have trouble using a front panel USB connection try using the rear USB connectors instead Also data integrity issues may be more apparent when using the higher bit rates of USB 2 0 communication via these remote connections In the event that you wish to use a remote USB connector you should only use the highest quality USB 2 0 cables and validate the integrity of the resulting configuration to your satisfaction Disk Cache When using an operating system that caches disk writes Windows 95 98 ME for example it may appear information has been written to the drive via Windows Explorer for example when in actuality the information has only been stored in the disk cache A subsequent reboot of the system will clear the disk cache and show that no changes modifications were made to the write protected drive Pressing CTRL C in MS DOS will cause the disk cache to be reset and show this fact as well Most forensic imaging software uses direct disk access to read directly from the disk itself the contents of the operating system disk cache will not affect the ability to image the disk This includes the _ Restore directory created by Windows ME 11 2005 Digital Intelligence Inc Windows Drive Letter Access Windows NT 2K XP may att
16. onal driver related information SS ee Cables Use only high quality FireWire or USB cables If you are connecting the UltraBlock to a USB 2 0 controller be sure to use cables rated specifically for USB 2 0 transmission speeds C2 2005 Digital Intelligence Inc Attaching the UltraBlock USB 1 Confirm the UltraBlock Power Switch is Off Connect the power supply to the UltraBlock via the 5 pin DIN connector Connect the USB Device to the UltraBlock Connect the UltraBlock to the USB mass storage device either by directly connecting the device to the UltraBlock or by connected the appropriate cable If the USB device requires its own power supply make sure it is properly connected Connect the UltraBlock to the PC Connect the UltraBlock to your PC using either a FireWire400 or USB cable Use caution when connecting cables connecting cables backwards can permanently damage the UltraBlock and void the warranty Turn the UltraBlock On Changing USB Devices 1 Stop Unload or Dismount the associated USB or FireWire device using the applicable operating system icon process or utility This will notify the operating system to complete any pending transfer operations so the device can be safely disconnected Turn the UltraBlock Off Remove existing USB device Disconnect the USB mass storage device from the UltraBlock Attach New USB Device Connect the UltraBlock to the USB mass storage device eithe
17. opyrights of their respective companies and are used only for identification or explanation into the owners benefit without intent to infringe eUltraBlock is a trademark and Digital Intelligence amp is a registered trade mark of Digital Intelligence Inc el ableau is a registered trademark of Tableau LLC eAdobe and Acrobat are registered trademarks of Adobe Systems Incor porated elntel and Pentium are registered trademarks of Intel Corporation eWindows Windows NT Windows XP Windows 2000 and MS DOS are registered trademarks of Microsoft Corporation Specifications and information contained in this manual are furnished for infor mational use only and are subject to change at any time without notice and should not be construed as a commitment by DI DI assumes no responsibility or liability for any errors or inaccuracies that may appear in this manual includ ing the products and software described in it CAUTION Any changes or modifications not expressly approved in this manual could void your warranty UltraBlock USB User Manual i LIMITED WARRANTY Digital Intelligence Inc DI warrants to the original end user that the product excluding accessories will be free from defects in materials and or workmanship for a period of one 1 year from the date of shipment This limited warranty is non transferable and is issued only to you the first end user purchaser Exclusions Th
18. r by directly connecting the device to the UltraBlock or by connected the appropriate cable If the USB device requires its own power supply make sure it is properly connected Turn the UltraBlock On Disconnecting the UltraBlock USB te Stop Unload or Dismount the associated USB or FireWire device using the applicable operating system icon process or utility This will notify the operating system to complete any pending transfer operations so the device can be safely disconnected Turn the UltraBlock Off Disconnect the UltraBlock from PC Disconnect the FireWire or USB cables from the PC and the UltraBlock Disconnect Power Supply from the UltraBlock Disconnect and unplug the UltraBlock power supply Disconnect the USB Device from the UltraBlock UltraBlock USB User Manual 4 LCD Display The UltraBlock USB incorporates an LCD display used to view a variety of information The information provided includes the make model serial number and capacity of the subject USB mass storage device Other additional information provided is intended to assist in troubleshooting situations The two buttons Menu and Enter on the top face of the UltraBlock USB allow navigation among the various informational screens The Menu button advances to the next Main Menu screen If an informational screen within a menu is currently dis played then the Menu button returns the display to the corresponding Main Menu screen
19. rmation about how the UltraBlock is internally managing the USB device Dev1 HS Dev 8 8 P 0 1 Ph 0 1 UltraBlock USB User Manual 8 NOTE There are eight information screens for each device It is important to note that there is a USB Hub built in to the UltraBlock USB This Hub is always identified as DevO in the USB Technical Information displays T8 BRIDGE INFO The T8 Bridge Information Display provides information about the UltraBlock itself Do not confuse this with information about a USB device which may be attached to the bridge UltraBlock USB model name Tableau T8 USB Forensic Bri dge Firmware timestamp Jul 26 2005 15 01 41 Internal serial number i hi 000ecc01 10 00080032 State of DIP switch 1 Off Switch Not used State of DIP switch 2 see switch settings Report protect State of DIP switch 3 see switch settings Report Errors State of DIP switch 4 Switch used 9 2005 Digital Intelligence Inc Modifying your UltraBlock Capabilities The UltraBlock USB is shipped with the ability to change the way in which it responds to the operating system There is a small knock out panel located on the right edge of the UltraBlock This panel must be removed for access to the configuration switches a small razor knife is ideal for this operation The default position for all switches is OFF Switches 2 and 3 control how the UltraBlock responds to the operatin
20. s 2000 ON ON Windows 2000 does not mount NTFS volumes correctly when the bridge declares that it is READ ONLY These settings make Windows 2000 believe the bridge is in READ WRITE mode even though it is not and Windows 2000 will successfully mount NTFS volumes Most other modern operating systems handle READ ONLY forensic bridges correctly so the default OFF settings are best for users of these operating systems UltraBlock USB User Manual 10 Summary of Switch Settings Switch 1 Not Used Switch 2 OFF Unit reports errors if writes are attempted ON Unit suppresses errors if writes are attempted no error Switch 3 Only functions if Switch 1 OFF i e read only OFF Unit reports Write Protect WP status in code page ON Unit suppresses Write Protect WP status in code page Switch 4 Reserved Important Considerations Removal of Drives DO NOT disconnect the USB Device from the UltraBlock while the unit is powered on Do Not Use USB Cable Extenders When operating the UltraBlock device via the USB interface it is important to understand that the USB communication specification does NOT permit cable extenders such as those used to bring the USB connector to the front of the computer A number of name brand computer motherboard and case manufacturers have adopted the practice of bringing the USB connector to the front of the computer by using a cable extender even though this practice is not compliant with the
Download Pdf Manuals
Related Search