Mapping: Device Control Settings

Policy Settings

OfficeScan

Worry-Free Services

Device Control

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Security Agents > {group} > Configure Policy > Device Control > Endpoint Settings

Settings

Setting: Enable Device Control

Setting: On/Off switch

Setting: Block the AutoRun function on USB storage devices

Section: Storage Devices

Setting: Block the AutoRun function on USB storage devices

Setting: Storage device permissions

Section: The Storage Devices, Mobile Devices, and Non-Storage Devices sections

Allowed Program List

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Security Agents > {group} > Configure Policy > Device Control > Exceptions

Settings

Section: Program Lists

Section: Programs

Alert

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Security Agents > {group} > Configure Policy > Privileges and Other Settings > Alerts

Settings

Section: Notifications

Section: Data Protection

Setting: Device Control

Approved devices

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Set the USB storage devices permission to Read and click Advanced permissions and notifications

Policies > Global Exception Lists

Settings

Section: Approved devices

Section: Data Protection

Setting: Device Control

Advanced permissions

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Set the USB storage devices permission to Read and click Advanced permissions and notifications

Security Agents > {group} > Configure Policy > Device Control > Exceptions

Settings

Section: The Program Lists and Program Path and File Name or Digital Signature Provider sections

Section: Programs

Advanced permissions

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Set the USB storage devices permission to Block and click Advanced permissions and notifications

Security Agents > {group} > Configure Policy > Device Control > Exceptions

Settings

Section: Approved device(s)

Setting: Approved USB storage deivces will have the following permission

Section: USB Devices

Alert

Console location

Agents > Agent Management > Settings > Device Control Settings > Internal Agents

Set the USB storage devices permission to Read and click Advanced permissions and notifications

Security Agents > {group} > Configure Policy > Privileges and Other Settings > Alerts

Settings

Section: Notification

Section: Data Protection

Setting: Device Control