USB Devices (Monitoring & Blocking)

Two types of monitoring are available to detect USB-based devices being physically connected (i.e. plugged in) to the USB ports of Windows and macOS Client computers, and perform various actions:

• Automatic USB device monitoring (i.e. automatically detected, without USB monitoring rules added): Allows you to view information on USB devices plugged in to Windows Client computers and detected as USB devices. This type of monitoring is performed automatically and does not require any additional settings for the Client to be enabled or USB monitoring rules to be added. Information on USB devices plugged in and detected, is displayed in the Session Viewer.

NOTE: This feature is not currently supported for macOS Clients.

• Non-automatic USB device monitoring (i.e. with USB monitoring rules added, which are detected similar to alerts): Provides you with the means for in-depth detection and analysis of various classes of USB devices plugged in to Windows and macOS Client computers by adding USB monitoring rules, and to perform the following actions:

- Monitoring: To view information on devices plugged in and detected, in a similar same way to alerts triggered, on both the Alerts tab (on the Activity Monitoring page) and in the Session Viewer.

- Send notifications: To receive notifications (by email and in the Tray Notifications application) when a USB device is plugged in to the Client computer.

- Blocking: To block access to USB devices (of specific device classes defined), so that they cannot be used on Client computers, and the user can also be informed that the device has been blocked on their computer.

NOTE: This feature is not currently supported for macOS Clients.

- Block access to USB device until administrator approval: To block access to USB devices (of specific device classes defined) until approval by an administrator or other trusted user (i.e. Approver). In this case, the user will be prompted to request access from the Approvers defined whenever such a USB device is connected to the Client computer.

NOTE: This feature is not currently supported for macOS Clients.

It is also possible to create a list of exceptions for USB devices that will not be monitored or blocked.

WARNING: It is recommended to add all permitted devices to the list of exceptions, so as not to accidently block them from being used.

Table of Contents