Allowed devices

If you have restricted access to some device classes or buses, you can allow access to certain devices by adding them to the list of allowed devices.

You can allow access to any types of devices, including removable media (USB flash, floppy, CD/DVD, ZIP drives, etc.), keyboards, printers, LAN adapters and so on. You can also add a certain device to the list of allowed devices to exclude it from the scan for BadUSB vulnerability.

You can allow access to devices for all users, user groups and individual users.

To configure the general list of allowed devices

1.Select the Users root group.

2.Enable the Grant access only for allowed devices option. The access for allowed devices from the general list is allowed to all users with Dr.Web for OS Window installed.

info

The option is available for the Users root group only. In case the access for allowed devices is granted, you can configure users lists of allowed devices.

3.Configure the list of allowed devices

To configure the users list of allowed devices

1.Select the necessary user group or an individual user (see Types of user settings).

2.Open the Allowed devices section.

3.Configure the list of allowed devices

To configure the list of allowed devices for users and groups of users

1.To add a device to the list, click icon-item-add.

2.In the Add devices to the allowed list window, use the following options:

Select a device in the Previously connected devices field and transfer it to the Devices for adding to the allowed list field using the arrow.

info

You can add the selected element to the Devices for adding to the allowed list field either as a device, or as a mask. The mask allows to exclude the device that generates new ID every time it connects to the station.

Specify the device ID manually in the corresponding field and click icon-item-add.

info

Previously connected devices list is available for individual users only.

 

Previously connected devices list is available after the station is connected to the Server.

3.Click Save.

4.To configure access rules for devices with file systems, enable the Read option to browse the device and the Write option to change it. The rules for devices with file systems can by specified for user groups and individual users only.

5.To remove a device from the list, select the corresponding item in the list and click icon-item-remove.

6.To add other devices, repeat steps 1 and 2.

To configure the list of allowed devices for groups of stations

1.Select the corresponding group of stations.

2.Open the Allowed devices section.

3.To add a device to the list, click icon-item-add.

4.In the Add devices to the allowed list window, select a station. The list of devices previously connected to this station opens.

5.Select a device in the Previously connected devices field and transfer it into the Devices for adding to the allowed list field using the arrow. Device ID will appear in the Specify the device ID manually field.

info

You can add the selected element to the Devices for adding to the allowed list field either as a device, or as a mask. The mask allows to exclude the device that generates new ID every time it connects to the station.

6.Click icon-item-add.

7.Click Save.

8.To configure access rules for devices with file systems, enable the Read option to browse the device and the Write option to change it. The rules for devices with file systems can by specified for user groups and individual users only.

9.To remove a device from the list, select the corresponding item in the list and click icon-item-remove.