Overview :

This document describes the process that can be followed by Admin to allow Specific USB/Flash Drive Device as excluded.

Use Cases:

1. When Organization wants to block USB drive Access by default but allows any specific USB Drive.
2. When the requirement is to allow Internal Card Reader access and block USB access but the user is unable to achieve it. Internal Card readers only become accessible when complete USB access is allowed.
Such behaviors are under investigation by Seqrite, meanwhile, Admin can follow the steps suggested in this article to allow access to Internal Card Reader.

Steps to Add Device Exclusion by Serial Number :
1. Login to your EPS web console.
2. Click on Admin Settings >Server > Manage Devices.
3. Then click on Add Devices, and in that Select "USB by Serial number" Check the below image for reference: -

4. Add the Device Name and Serial Number of the device. Click on OK. Refer Note at the, to identify the device serial number.

5. After the addition of the device in Manage Devices, we need to Authorize it.

For that select that device entry and scroll down the complete page and select last column option of "Authorized" and enable that option to “Yes”. Check below image for more details on this option.

6. After adding the device under admin settings, open policy (here we have created policy as ADVTEST) under which we want to add USB under the exception. You can either create a new policy or modify the existing policy.

7. In that policy, select the option of Client Settings > Advance Device control Click on “Exceptions” Refer to below image.

8. Then click on ADD.

9. After clicking on "Add", you will get below window. In that all device list is present which you have added in Manage Devices, Select the required device and click on "Add to Exception" to “Yes”

10. Click on OK.
11. Then select action under "Access" as a “Allow”.

12. Then click on “Save Policy"
13. Once the Policy gets saved, this particular device will be accessible on endpoints where this policy has been applied.

Note: Follow the below steps to identify the device's Serial number.
1. Insert the flash drive into your computer.
2. Once recognized, display the properties of the device using the Device Manager within Windows.
3. Under the Properties pop-up window, click on the "Details" tab.
4. In the Property drop-down menu. Select "Device Instance Path".
5. The Serial Number is displayed under value output. Scroll the text to the extreme right, The serial number is displayed in the end (as highlighted in green in the screenshot). Note down the serial number.

Please contact Seqrite Technical Support for more assistance.