Device control rules editor

The Device control rules editor window displays existing rules and allows for precise control of external devices that users connect to the computer.

device_control_rules

Specific devices can be allowed or blocked by user, user group, or any of several additional parameters that can be specified in the rule configuration. The list of rules contains several descriptions of a rule such as its name, the type of external device, the action to perform when a device is detected, and log severity.

Use the following buttons at the bottom of the window to manage rules:

Add - lets you add a new rule.

Edit - lets you modify settings of an existing rule.

Copy - creates a new rule based on the parameters of the selected rule.

Remove - if you want to delete the selected rule. Alternatively, you can use the check box next to a given rule to disable it. This can be useful if you don't want to delete a rule permanently so that you can use it in the future.

Populate - detects removable media device parameters for devices connected to your computer.

Rules are listed in order of priority with higher-priority rules at the top. You can select multiple rules and apply actions, such as deleting or moving them up or down the list by clicking Top/Up/Down/Bottom (arrow buttons).

Log entries can be viewed from the main program window of ESET Mail Security in Tools > Log files.