I am running EPO 5.9.1 and need some assistance creating a policy that blocks all storage devices from Windows devices that are saved in a particular group. I assume I will need to use the DLP policy. If someone could provide some assistance on how this policy should be built that would be greatly appreciated.
I am running EPO 5.9.1 and need some assistance creating a policy that blocks all storage devices from Windows devices that are saved in a particular group.
=> First we need to find the way a connected storage device is identified by Windows Device Manager. Once we know the way it is identified, Device Definitions can be created and included in the respective rules. We already have in-bulit templates like Plug and Play device definitions, Removable Storage device definitions, Fixed Hard Drives and others. If the device is one of these definitions then rules will take an action to block, monitor..
Few KB articles I would like to refer--
How to block all USB drives and set exclusions for specific USB drives using Data Loss Prevention Endpoint
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.