You can control the access to USB storage devices, such as blocking the access to all unapproved USB devices.

Note: USB device blocking is only available for Windows 3.6+ and macOS 3.5.3+ sensors.

Procedure

  1. On the left navigation pane, click Enforce > Policies.
  2. Select the policy.
  3. Click the Prevention tab and expand USB Device Blocking.
  4. Turn on blocking by selecting Block access to all unapproved USB devices. You can choose the level of permission to block or approve. The two permissions to choose from are:
    • Write: This permission allows users to view, download, and edit.
    • Execute: This permission allows users to view, download, edit, and execute a script.
    Important: The Read access permission is automatically active when a policy is approved.
    Important: Granular control of Write and Execute permissions only applies to Windows sensor 3.9.2 and above. Older sensors allow Read, Write, and Execute permissions.

    USB blocking options displaying read, write, or execute blocking

  5. Optional: Copy the same setting to all policies or to a specific policy by clicking Copy setting to other policies. Click Copy.
  6. To apply the changes, click Save.