Creation of Device Control Policies

There are two options to create device control policies

• Creating a Device control policies based on system-defined GUIDs and Device classes from a pre-defined list (Catalog).
• Creating a Custom Device Control Policies.

Creating a Device control policies based on system-defined GUIDs and Device classes from a pre-defined list (Catalog)

To allow device from Catalog

1. Click Create drop-down and click Allow Device from Catalog.
2. Select the class from the catalog shown and ensure Allow Selected is enabled.

3. Click Save.

   

To block device from Catalog

1. Click Create drop-down and click Block Device from Catalog.

2. Select the class from the catalog shown and by default Block Selected is disabled.

   For example, by choosing classes related to Printers and Storage Devices from the catalog shown, the user can block external printers and storage devices. For more information on use cases, see section "Use Cases and Best Practices"

3. Click Save.

   

The list contains system-defined device classes and their GUIDs. For more information, refer to System-defined device setup classes available to vendors.

Creating Custom Device Control Policies

SES also allows users to define custom device control policies in addition to the pre-defined catalog. Users can create policies based on Class GUIDS, Instance IDs, Vendor IDs, and Product IDs.

1. Click Create drop-down and click Create.
2. Enter the Name and Description in the Rules Details field.

3. Select the Allow or Block Action button based on the requirement.

4. Type the following Device information details:

   • Class GUID
   • Instance ID
   • Vendor ID
   • Product ID

   

5. Click Save.