Device Control

Device control allows or blocks the use of devices connected to a PC to prevent infection. If a device is allowed, the device can be used, but if a device is blocked, the device cannot be used. A device can be allowed or blocked based on the policies configured by a server administrator.

Note

The device control is available only in V3 ES 9.0, not in V3 IS 9.0.

Device Control Settings

You can configure the device control settings in the following way.

1. Log in to the admin console.
2. Click Policy/Advanced Rules.
3. Click Add to move to V3 Policy > V3 IS/ES 9.0.
4. Click Device Management > Device Control.
5. Enable or disable the server policy settings. To apply the server settings to agents, select Server Policy Settings.

• Apply the malicious websites settings configured in the agents: Controls devices based on the device control settings configured by an agent user.
• Apply the server policy: Controls devices based on the device control settings configured in EPP regardless of the device control settings configured by an agent user.

4. Enable or disable Device Control. To enable the device control option, select the Enable Device Control check box.
5. Specifies to allow or block the connection by device type.
6. Click Save to save configured policies.

Controlled Device

• USB device: All devices connected to the USB port on a PC including the removable memory device, external hard drive, Xbox controller, Web camera, Wibro device, smart card reader, printer, CD-ROM or floppy disk.
• Allow

• Write to USB devices
• Allow: Adds data to a USB storage device or modifies the original content.
• Block: Cannot add data to a USB storage device or cannot modify the original content. If the Logging for USB devices option is enabled, logs will be created when a user attempts to use a USB storage device.

• Block:
• Use USB Printer: Allows or blocks a USB printer to use.
• Use USB Media: All devices connected to the USB port will be allowed or blocked including the printer, telephone, audio device, DVD multi-media device, joystick port and full motion video capture device, which a system recognizes as a media device.

• Network adapter: LAN, Wireless, WIFI, Bluetooth and Wibro devices are controlled.
• Allow
• Block
• Wired LAN: Controls a wired LAN cable. Even if a network adapter is blocked, the wired LAN can be used.

Caution

If the wired LAN is blocked, the network is not available and cannot be restored using EPP management.

• Wireless LAN: Controls a wireless LAN cable. Even if a network adapter is allowed, the wireless LAN can be used.
• External Network Adapters: Controls bluetooth and Wibro devices. Even if a network adapter is allowed, the external network adapter can be blocked.

• IEEE 1394(FireWire): Controls the devices compatible with IEEE 1394(FireWire).
• PCMCIA Adapter: Controls PCMCIA Modem.
• Infrared Transfer Device: Controls the infrared transfer dongle.
• Bluetooth Devices: Controls the keyboard, mobile phone and dongle devices.
• Imaging Devices: All devices connected to the imaging devices will be allowed or blocked including the still imaging capturing device, digital camera and scanner.
• Portable Devices: Controls devices including a smart phone connected the portable devices in Device Manager.
• COM/LPT Port: Controls Wibro or mobile devices.
• Disk Drive: Controls the removable USB memory and external hard drive.
• Modem: Controls the modem, mobile phone and Wibro device.
• Floppy Disk Drive: Controls the USB floppy disk drive.
• CD/DVD Drive: Controls the USB CD-ROM and internal CD-ROM.
• Smart Card Reader: Controls the smart card reader.

Note

Allows or blocks the devices based on the allowed or blocked status for other devices. For example, the USB network adapter cannot be used when writing to a USB device is not enabled, even if the network adapter is allowed.