Configuring Device Control task

To configure the Device Control task settings:

1. Open the Device Control window.
2. On the General tab, configure the following task settings:
   • In the Task mode block, select one of the following task modes:
     • Active.
       

       Kaspersky Embedded Systems Security for Windows applies rules to control the connection of removable drives and other external devices, and allows or blocks the use of all devices according to the Default Deny principle and specified allowing rules. The use of trusted external devices is allowed. The use of untrusted external devices is blocked by default.

     If an external device you consider to be untrusted is connected to a protected device before the Device Control task is started in Active mode, the device is not blocked by the application. We recommend that you disconnect the untrusted device manually or restart the protected device. Otherwise, the Default Deny principle will not be applied to the device.

     • Statistics only.
       

       Kaspersky Embedded Systems Security for Windows does not control the connection of removable drives and other external devices, but only logs information about the connection and registration of external devices on a protected device, and about the Device Control allowing rules triggered by the connected devices. The use of all external devices is allowed. This mode is set by default.

   • Select or clear the Allow using all external devices when the Device Control task is not running check box.
     

     The check box allows or blocks the use of external devices when the Device Control task is not running.

     If the check box is selected and Device Control task is not running, Kaspersky Embedded Systems Security for Windows allows using any external devices on a protected device.

     If the check box is cleared, the application blocks the use of untrusted external devices on a protected device in the following cases: the Device Control task is not running or the Kaspersky Security Service is turned off. This option is recommended to maximize the level of protection against computer security threats arising when exchanging files with external devices.

     By default, the check box is cleared.

3. Click the Rules list button to edit the list of Device control rules.
4. If necessary, configure the task start schedule settings on the Task management tab.
5. Click the OK button in the Device Control window.

Kaspersky Embedded Systems Security for Windows immediately applies the new settings to the running task. Information about the date and time when the settings were modified, and the values of task settings before and after modification, are saved in the system audit log.