About Device Control

Device Control manages user access to devices that are installed on or connected to the computer (for example, hard drives, cameras, or Wi-Fi modules). This lets you protect the computer from infection when such devices are connected, and prevent loss or leaks of data.

Device Control controls access at the following levels:

• Device type. For example, printers, removable drives, and CD/DVD drives.

  You can configure device access as follows:

  • Allow – .
  • Block – .
  • Depends on connection bus (except for Wi-Fi) – .
  • Block with exceptions (Wi-Fi only) – .
• Connection bus. A connection bus is an interface used for connecting devices to the computer (for example, USB or FireWire). Therefore, you can restrict the connection of all devices, for example, over USB.

  You can configure device access as follows:

  • Allow – .
  • Block – .
• Trusted devices. Trusted devices are devices to which users that are specified in the trusted device settings have full access at all times.

  You can add trusted devices based on the following data:

  • Device ID. Each device has a unique ID. You can view the ID in the device properties by using operating system tools.
  • Device model. Each device has a VID (vendor ID) and PID (product ID). You can view the IDs in the device properties by using operating system tools.
  • ID mask. For example, device*.

Device Control regulates user access to devices by using access rules. Device Control also lets you save device connection/disconnection events. To save events, you need to configure the registration of events in a policy.

If access to a device depends on the connection bus (the status), Kaspersky Endpoint Security does not save device connection/disconnection events. To enable Kaspersky Endpoint Security to save device connection/disconnection events, allow access to the corresponding type of device (the status) or add the device to the trusted list.

When a device that is blocked by Device Control is connected to the computer, Kaspersky Endpoint Security will block access and show a notification (see the figure below).

Device Control notification

Page top