Device Control

SES allows you to control what USB devices can be connected to or are blocked from connecting to an endpoint. This feature can be used on Windows devices.

SES features a device control option that allows you to prevent malware threats from spreading via USB devices and also to prevent data exfiltration. USB devices are still a big source of malware threats spreading through an environment, and they are often used by insiders to steal sensitive data from an organization.

Device Control lets you manage which external devices can be used with endpoints in your organization. It can be used at tenant level and at the policy level; each device control list is independent of the other. The policy device control takes precedence over the global device control. Use Device Control to:

• Block those external devices that are not required so data leaks are limited.
• Strictly control allowed devices to prevent malicious content from entering your network through external devices.

To view and download the Device Control settings

Navigate to Policy > Device Control.

The table below shows the device control files list in detail:

Options	Description
Tenant	Displays the tenant's details.
Group	Displays the group's details.
Name	Displays the device name.
Description	Displays the file description.
GUID	Displays the GUID.
Instance ID	Displays the Instance ID.
Product ID	Displays the Product ID.
Vendor ID	Displays the Vendor ID.
Status	Displays the status (Enabled or Disabled).
Action	Displays the Block or Unblock Status.
Updated At	Displays the date and time the entry was last updated.
Created At	Displays the date and time the entry was created.

To refine the search for specific issues, click on the Filter icon. It expands and you can select a combination of parameters to filter against.

You also have the options:

1. All Related Scopes: Click drop-down to choose the below options:
   • This Scope and its ancestors
   • This scope and its descendants
2. Table Action: Select the file and click the Table Action to choose the following actions
   • Enable Rule
   • Disable Rule
   • Delete Rule
3. Download: Click Download to get the device control details in CSV file.
4. Clear: Click Clear to refresh data.

• Creation of Device Control Policies