Views:

StellarProtect/StellarProtect (Legacy Mode) agent supports one-time USB access permission on site; while StellarOne console offers permanent USB access permission via remote configuration.

For the local agent, when USB device control has been enabled, every time users plug in USB devices, the agent will prompt a message for users to confirm if the USB device access is allowed. On top of that, StellarOne users with administrator or operator role can add trusted USB devices into the Device Control list, allowing the specified devices to access directly without further check, thus facilitating the trusted USB access for good.

Note:

In addition to USB drives, StellarProtect (Legacy Mode) also supports blocking CD/DVD drives and floppy disks on managed endpoints.

  1. Go to Agents > All.
  2. Navigate to the target agent or group, and then go to its Policy page.
    Note:

    For more detailed procedures of how to go to the Policy page, refer to Go to the Policy Screen.

  3. Make sure the Device Control toggle is switched on.
  4. Click Add. The Add Trusted USB Device window appears.
  5. Specify at least one of the following information for the trusted USB device.

    • Vendor ID

    • Product ID

    • Serial number

  6. Click OK to complete the setting.
  7. Check if the USB device is successfully added in the device control list.
  8. (Optional) To edit the USB device information, select the USB device and click the edit icon under the Actions header. A pop-up window appears. Edit the USB device information in the related text fields and then click OK.
  9. (Optional) To remove a USB device from trusted list, choose either way listed below.

    • For removing mutiple USB devices at the same time, select the USB devices and click the Delete button next to the +Add button.

    • For removing only one USB devices, click the edit icon under the Actions header.

    A pop-up Notification window appears. Click Confirm to delete the USB device(s).

Parent topic: Other Policy Settings