Device Control task settings
February 8, 2024
ID 198078
The table describes all available values and the default values of all the settings that you can specify for the Device Control task.
Device Control task settings
Setting | Description | Values | |
---|---|---|---|
| Action preformed by Kaspersky Industrial CyberSecurity for Linux Nodes upon an attempt to access a device protected by the access rules. |
| |
The [DeviceClass] section contains access rules for devices depending on their type. | |||
| Specifies access rules for hard drives connected to a computer. |
| |
| Specifies access rules for removable drives connected to a computer. |
| |
| Specifies access rules for floppy disks connected to a computer. The application does not block floppy disks connected to the computer using the ISA bus. |
| |
| Specifies access rules for CD/DVD drives connected to a computer. |
| |
| Specifies access rules for devices connected to a computer through a serial port. The application does not block devices connected to a computer via a serial port using the ISA bus. |
| |
| Specifies access rules for devices connected to a computer through a parallel port. |
| |
| Specifies access rules for printers connected to a computer. |
| |
| Specifies access rules for modems connected to a computer. |
| |
| Specifies access rules for tape devices connected to a computer. |
| |
| Specifies access rules for multifunctional devices connected to a computer. |
| |
| Specifies access rules for smart card readers connected to a computer. |
| |
| Specifies access rules for Wi-Fi adapters connected to the computer. |
| |
| Specifies access rules for external network adapters connected to a computer. |
Device Control does not allow you to deny access to external network adapters to avoid disconnecting your computer from the network. | |
| Specifies access rules for portable devices connected to a computer. |
| |
| Specifies access rules for Bluetooth devices connected to a computer. |
| |
| Specifies access rules for imaging devices connected to a computer. |
| |
| Specifies access rules for sound adapters connected to a computer. |
| |
| Specifies access rules for input devices (keyboards, mouse, touch pad and other) connected to a computer. |
| |
The [DeviceBus] section contains connection bus access rules that determine whether the connection of devices is allowed or blocked. | |||
| Specifies connection bus access rules for devices connected to a computer via USB interface. |
| |
| Specifies connection bus access rules for devices connected to a computer via FireWire interface. |
| |
The [TrustedDevices.item_#] section contains trusted devices, access to which is not restricted by the rules from the [DeviceClass] and [DeviceBus] sections. | |||
| Specifies ID or ID mask of a trusted device. You can use the following masks to indicate the device ID: * (any sequence of characters) or ? (any character). | — | |
| Comment to the specified trusted device. | — | |
The [Schedules.item_#] section contains the device access schedule. You can configure schedules only for hard drives, removable drives, floppy disks, and CD/DVD drives. | |||
| Specifies a schedule name. The You cannot delete the | The default value: | |
| Specifies time intervals for a schedule. |
| |
The [HardDrivePrincipals.item_#] section contains hard drive access rules. For hard drives, at least one schedule must always be enabled. You can assign several access rules to a hard drive. Also, multiple schedules can be specified for a user or group of users. If access schedules for a user or group conflict, minimal access rights are granted. | |||
| Specifies a user or group of users for whom the access rule is applied. |
| |
| Access rule settings. | — | |
| Specifies whether the rule is enabled or disabled. |
| |
| Schedule specified in the | The default value: | |
| Specifies access type. |
| |
The [RemovableDrivePrincipals.item_#] section contains the access rules for removable drives. For removable drives, at least one schedule must always be enabled. You can assign several access rules to a removable drive. Also, multiple schedules can be specified for a user or group of users. If access schedules for a user or group conflict, minimal access rights are granted. | |||
| Specifies a user or group of users for whom the access rule is applied. |
| |
| Access rule settings. | — | |
| Specifies whether the rule is enabled or disabled. |
| |
| Schedule specified in the | The default value: | |
The [FloppyDrivePrincipals.item_#] section contains access rules for floppy drives. For floppy drives, at least one schedule must always be enabled. You can assign several access rules to a floppy drive. Also, multiple schedules can be specified for a user or group of users. If access schedules for a user or group conflict, minimal access rights are granted. | |||
| Specifies a user or group of users for whom the access rule is applied. |
| |
| Access rule settings. | — | |
| Specifies whether the rule is enabled or disabled. |
| |
| Schedule specified in the | The default value: | |
| Specifies access type. |
| |
The [OpticalDrivePrincipals.item_#] section contains the access rules for CD/DVD drives. For CD/DVD drives, at least one schedule must always be enabled. You can assign several access rules to a CD/DVD drive. Also, multiple schedules can be specified for a user or group of users. If access schedules for a user or group conflict, minimal access rights are granted. | |||
| Specifies a user or group of users for whom the access rule is applied. |
| |
| Access rule settings. | — | |
| Specifies whether the rule is enabled or disabled. |
| |
| Schedule specified in the | The default value: | |
| Specifies access type. |
|