To control access to a USB device, you create a device definition against which the ZENworks Endpoint Security Agent compares devices. The device being compared must match all fields in the definition in order to control its access. If the device does not provide data for a field that is required, or if the provided data is incorrect, the device does not match.
The
field (required) and the field (optional) are used only to identify the device in ZENworks Control Center. The fields are not used as match criteria by the ZENworks Endpoint Security Agent.The
field (required) determines whether access to the device is enabled or disabled. Select one of the following settings:Disable: Disable access.
Enable: Enable access.
Default Device Access: Give the device the access specified by the
setting.Inherit: If the policy’s
setting is enabled, inherit this setting from other USB Connectivity policies assigned higher in the policy hierarchy. For example, if you assign this policy to a user, the setting is inherited from any USB Connectivity policies assigned to the user’s groups, folders, or zone.The fields on the Recommended tab are typically sufficient to use for the match criteria. As a best practice, we recommend that you use the fewest number of fields needed to accurately match the device. The more fields you use, the more restrictive the definition becomes.
The
, , and fields are substring match. For example, “San”, and “SanDisk” both match all SanDisk devices while “SanDisk Cruzer” and “Cruzer” match all SanDisk Cruzer devices but excludes all other SanDisk devices.The
, , and fields are exact match. Be aware that not all devices have unique serial numbers. To guarantee a unique match based on a serial number, use the and fields as well.The Recommended fields are not case sensitive.
The fields on the Advanced tab can be used to refine the match criteria in order to isolate very specific devices. Use of these fields can literally restrict a device definition so that it only matches a single device on a specific USB port on a specific computer.
All of the Advanced fields are exact match. They are not case sensitive.
For trademark and copyright information, see Legal Notice.