Blocking device access using predefined rules - F-Secure Community
<main> <article class="userContent"> <p> </p>Blocking device access using predefined rules <p>This article applies to the following F-Secure products: Client Security, Policy Manager, PSB portal, and Computer Protection. </p> <p>Device Control is provided with the following set of common rules: </p> <div> <ul><li>USB Mass Storage devices </li> <li>Wireless devices <br><strong>Note:</strong> Some USB Wi-Fi adapters do not use the USB\Class_E0 hardware ID. To control such devices, create a custom rule. </li> <li>DVD/CD-ROM drives </li> <li>Windows CE ActiveSync devices </li> <li>Floppy drives </li> <li>Modems </li> <li>COM & LPT ports <br><strong>Note:</strong> This rule does not control a device connected to the COM or LPT port but the port itself. </li> <li>Printers </li> <li>Smart card readers </li> <li>Imaging devices (cameras and scanners) </li> <li>IEEE 1394 Host Bus Controller </li> <li>IrDA devices </li> <li>Bluetooth devices </li> </ul></div> <p>To prevent users from using the devices, the administrator should select "Blocked" access level for the desired rule. </p> <p><strong>Adding exceptions (grant access to the specific device)</strong> </p> <p>It is possible to define rules that allow the use of some specific device when all other devices of the same class will be blocked: </p> <div> <ol><li>Get <strong>Hardware ID</strong> of device that should be allowed. The Hardware ID has to be more specific than ID used to block the device. </li> <li>Add new rule in <strong>Hardware Devices</strong> table with the ID. </li> <li>Set <strong>Full access/Allow</strong> level for the new created rule. </li> <li>Set Active <strong>Yes</strong> for the new created rule. </li> </ol></div> <div id="related"> <strong>Related information</strong> <ul><li><a rel="nofollow" href="https://community.f-secure.com/common-business-en/kb/articles/5533">Device Control overview </a></li> <li><a rel="nofollow" href="https://community.f-secure.com/common-business-en/kb/articles/5525">How Device Control block devices </a></li> <li><a rel="nofollow" href="https://community.f-secure.com/business-suite-en/kb/articles/5637">Getting Hardware ID for a device </a></li></ul></div> <br> </article> </main>
