Device Control | Trend Micro Service Central

Views:

StellarProtect/StellarProtect (Legacy Mode) agent supports one-time USB access permission on site; while StellarOne console offers permanent USB access permission via remote configuration.

For the local agent, when USB device control has been enabled, every time users plug in USB devices, the agent will prompt a message for users to confirm if the USB device access is allowed. On top of that, StellarOne users with administrator or operator privilege can add trusted USB devices into the Device Control list, allowing the specified devices to access directly without further check, thus facilitating the trusted USB access for good.

Note:

In addition to USB drives, StellarProtect (Legacy Mode) also supports blocking CD/DVD drives and floppy disks on managed endpoints.

Go to Agents > All.
Navigate to the target agent or group, and then go to its Policy page.

Note:
For instructions on how to go to the Policy page, see Go to the Agent View for a single agent or Go to the Group Policy Screen for a group of agents.
Make sure the Device Control toggle is switched on.
Click Add. The Add Trusted USB Device window appears.
Specify at least one of the following information for the trusted USB device.
- Vendor ID
- Product ID
- Serial number
Click OK to complete the setting.
Check if the USB device is successfully added in the device control list.
(Optional) To edit the USB device information, select the USB device and click the edit icon in the Actions column. A pop-up window appears. Edit the USB device information in the related text fields and then click OK.
(Optional) To remove a USB device from trusted list, choose either way listed below.
- For removing multiple USB devices at the same time, select the USB devices and click the Delete button next to the +Add button.
- For removing only one USB devices, click the Delete icon in the Actions column.
A pop-up Notification window appears. Click Confirm to delete the USB device(s).