Storage Devices
| Device Control - Device Type | Device Manager - Device Type | Supported Class GUID | Additional Requirements |
|---|---|---|---|
| CD/DVD | DVD/CDROM drives | {4D36E965-E325-11CEBFC1-08002BE10318} | - |
| Floppy disks | Floppy disks drives | {4D36E965-E325-11CEBFC1-08002BE10318} | - |
| Floppy drive controllers | {4D36E969-E325-11CEBFC1-08002BE10318} | - | |
| USB storage drives | Disk drives | {4D36E967-E325-11CEBFC1-08002BE10318} |
|
| Network drives | N/A | N/A | N/A |
Mobile Devices
| Device Control - Device Type | Device Manager - Device Type | Supported Class GUID | Additional Requirements |
|---|---|---|---|
| Mobile devices / Storage | Universal Serial Bus Controllers | {4F919108-4ADF-11D5-882D-00B0D02FE381} | - |
| {3F966BD9-FA04-4EC5-991CD326973B5128} | - | ||
| {F72FE0D4-CBCB-407D-8814-9ED673D0DD6B} | - | ||
| {17FDD8F0-53DF-406F-8287-8C38F6FC9BCC} | - | ||
| {8801E650-78DB-4711-A6E1-8C23B216928A} | - | ||
| {36FC9E60-C465-11CF-8056-444553540000} | Verify that at least one of the Compatible Ids values begins with “USB\” and that the USB Class Code is “06”. | ||
| Portable Devices | {EEC5AD98-8080-425F-922A-DABF3DE3F69A} | ||
| Bluetooth Adapters | Bluetooth / Bluetooth Radios | {E0CBF06C-CD8B-4647-BB8A-263B43F0F974} | - |
| {F12D3CF8-B11D-457E-8641-BE2AF2D6D204} | - | ||
| {95C7A0A0-3094-11D7-A202-00508B9D7D5A} | - | ||
| {D76B962BF0B8-41F2-8590-6605FE4EA312} | - | ||
| {7240100F-6512-4548-8418-9EBB5C6A1A94} | - | ||
| COM and LPT ports | Ports (Com & LPT) | {4D36E978-E325-11CEBFC1-08002BE10318} | - |
| IEEE 1394 interface | IEEE 1394 Bus host controllers | {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} | - |
| Imaging devices | Imaging devices | {6BDD1FC6-810F-11D0-BEC7-08002BE2092F} | - |
| Infrared devices | Infrared devices | {6BDD1FC6-810F-11D0-BEC7-08002BE2092F} | - |
| Modems | Modems | {4D36E96D-E325-11CEBFC1-08002BE10318} | - |
| Print screen key | N/A | N/A | N/A |
| Wireless NICs | Network adapters | {4D36E972-E325-11CEBFC1-08002BE10318} | Verify that at least one of the Compatible Ids values begins with “USB\” and that one of the following conditions is true
|
- Go to Logs > Agents > Security Risks or Agents > Agent Management.
- In the agent tree, click the root domain icon, to include all agents or select specific domains or agents.
- Click Logs > Device Control Logs or View Logs > Device Control Logs.
- Specify the log criteria and then click Display Logs. The Logs will contain the following information:
- Date/Time unauthorized access was detected
- Endpoint where external device is connected or where network resource is mapped
- Endpoint domain where external device is connected or where network resource is mapped
- Device type or network resource accessed
- Target, which is the item on the device or network resource that was accessed
- Accessed by, which specifies where access was initiated
- Permissions set for the target
- To save logs to a comma-separated value (CSV) file, click Export to CSV. Open the file or save it to a specific location.