Using Device Control Policies

In this section:

• Granting Access to the Device Control Policies Module
• The Device Control Policies Page
• Policy Permissions
• File Type Filtering
• File Shadowing
• Working with Device Control Policies

The Device Control Policies page allows you create and edit policies for device classes and device collections. The Device Control Policies page is accessible only if the user has the requisite permissions for the module.

When you install Ivanti Device Control, a standard list of supported device classes is provided in the Device Library. You can define a general policy for all devices based on the device classes that appear by default in the device list. If a particular device is not recognized in one of the types listed in the device list or if it belongs to a type for which the user has no access defined then the user can still access the device.

If you want to define permissions more precisely, you can set rules for certain models of devices or specific ones in some cases (removable devices). In this case, and only in this case, it is your responsibility to set up and manage the different models and specific devices for which you want to define permissions. You do not need to do that for all possible devices plugged to your network.