Kaspersky Embedded Systems Security 3.x

Viewing properties of Device Control rules

October 25, 2023

ID 237479

To view the properties of the Device Control rules:

  1. Open the Device Control window.
  2. On the General tab, click the Rules list button and double-click the selected rule.

    The Rule properties window appears.

    Properties of Device Control rules

    Property

    Description

    Apply rule

    Use this option to enable or disable the rule application.

    Manufacturer (VID)

    You can specify the device vendor's full VID or use the * character as a mask. The * character is used to identify any manufacturer.

    If the Use mask check box is selected for the Manufacturer (VID) field, the data from the field with the selected check box is replaced with the * character and is not considered when the rule is applied.

    Controller type (PID)

    You can specify the controller's full PID or use the * character as a mask. The * character is used to indicate any type of controller.

    If the Use mask check box is selected for the Controller type (PID) field, the data from the field with the selected check box is replaced with the * character and is not considered when the rule is applied.

    Serial number

    You can specify the full serial number of the device, or use the * or ? characters as a mask.
    The * character denotes any sequence of characters, including an empty sequence.
    The ? character denotes a single character in a sequence.

    If the Use mask check box is selected for the Serial number field, the data from the field with the selected check box is replaced with the * character and is not considered when the rule is applied.

    If you selected the Use a mask option, but do not enter any characters in the Serial number field, then save the settings and close the window, the application applies * as a mask for the Serial number property and does not consider the field when the rule is applied.

    Device instance path

    Identifier of the connected device.
    You cannot modify the property. The field is for information only. The application does not apply the field for device control.

    Friendly name

    Device name set by the manufacturer.
    You cannot modify the property. The field is for information only. The application does not apply the field for device control.

    User or group of users

    There are several ways to specify a user account or a group of users that have access to the selected USB devices.

    • using Active Directory Domain Services
    • using the list of users and user groups of the Administration Server
    • by adding manually.

    The operating system displays all connected USB-devices. You can access only the USB-drives for which you have the respective access rights.

    Description

    The default device description.
    If necessary, specify additional information about the rule in the Description field. For example, specify the devices affected by the rule.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.