Device groups
A device connected to your computer may pose a security risk. |
The Device groups window is divided into two parts. The right part of the window contains a list of devices belonging to the respective group, and the left part contains created groups. Select a group to display devices in the right pane.
When you open the Device groups window and select a group, you can add or remove devices from the list. Another way to add devices to the group is to import them from a file. Alternatively, you can click Populate button, and all devices connected to your computer will be listed in the Detected devices window. Select devices from the populated list to add them to the group by clicking OK.
Control elements
Add—You can add a group by typing its name or a device to an existing group, depending on which part of the window you clicked the button.
Edit—Allows you to modify the name of the selected group or device's parameters (vendor, model, serial number).
Delete—Deletes the selected group or device depending on which part of the window you clicked on the button.
Import—Imports a list of devices from a text file. Importing devices from a text file requires correct formatting:
•Each device starts at a new line.
•Vendor, Model, and Serial must be present for each device and separated with a comma.
Here is an example of the text file content: Kingston,DT 101 G2,001CCE0DGRFC0371 04081-0009432,USB2.0 HD WebCam,20090101 |
Export—Exports a list of devices to a file.
The Populate button provides an overview of all currently connected devices with information about device type, vendor, model and serial number (if available).
Add device
Click Add in the right window to add a device to an existing group. Additional parameters shown below can be used to fine-tune rules for different devices. All parameters are case-sensitive and support wildcards (*, ?):
•Vendor—Filter by vendor name or ID.
•Model—The given name of the device.
•Serial—External devices usually have their own serial numbers. In the case of a CD/DVD, this is the serial number of the given media, not the CD drive.
•Description—Your description of the device for better organization.
The rule will ignore these fields while matching if these parameters are undefined. Filtering parameters in all text fields are case-sensitive and support wildcards (a question mark [?] represents a single character, whereas an asterisk [*] represents a string of zeros or more characters). |
Click OK to save changes. Click Cancel to leave the Device groups window without saving changes.
After creating a device group, you have to add a new device control rule for the created device group and choose the action to take. |
Not all actions (permissions) are available for all device types. All four actions are available if it is a storage-type device. For non-storage devices, only three actions are available (for example, Write Block is not available for Bluetooth; therefore, Bluetooth devices can only be allowed, blocked or warned).