Device Control overview

The new Device Control tool is an important component of Endpoint Security that lets you monitor and restrict access for I/O devices. With Device Control, you can restrict the use of devices that allow data access to the device, such as ports, modems, drives, and wireless connections.

To implement Device Control on clients on your network, you create and deploy Device Control settings that manage USB, modem, I/O port, CD/DVD drive, wireless, and other connections.

You can configure USB restrictions by either generically blocking a whole class of USB devices, such as storage devices, or by using exceptions to restrict certain USB devices based on parameters and values you specify.

To configure Device Control agent settings

1. Click Tools > Configuration > Agent settings.
2. In the Agent settings tree, click Security > Endpoint Security.
3. Double-click the agent setting you want to modify.
4. Click Default policy. Enable the Device Control option and click the edit button next to it.

Component of Endpoint Security

Device Control is one of the components of the comprehensive Endpoint Security solution, along with Application Control and Ivanti Firewall tools.

Supported platforms

Device Control works for managed devices running supported Windows versions.