moved to DLP group.
Device rules are device specific. You can use device definitions to allow/block/read only specific devices in your environment. A protection rule does not inspect the device type, only that it's removable storage. The rule can be modified to only allow copying of data with specific users via the user assignment group.