CylancePROTECT Desktop device control
CylancePROTECT Desktop
device controlWhen this option is selected, any device control events will be logged to the syslog server.
Field | Value | Description |
|---|---|---|
Device Name | [varies] | This is the name of the device associated with the device control event. |
Event Type | DeviceControl | This is the type of event. |
Event Name | Blocked | A USB mass storage device cannot be used on the device (set in device policy). |
Fullaccess | A USB mass storage device can be used on the device (set in device policy). | |
Readonly | A USB mass storage device can be used with read-only access on the device (set in device policy). | |
External Device Type | AndroidUSB | The external device is an Android device. |
iOS | The external device is an iOS device. | |
StillImage | This external device is a still image device, like a camera. | |
USBCDDVDRW | This external device is a USB disc drive (CD, DVD, Blu-ray). | |
USBDrive | This external device is a USB drive, like a thumb drive. | |
VMWareMount | This external device is a VMware USB PassThrough. | |
WPD | This external device is a Windows Portable Device. | |
External Device Name | [varies] | The name given to the external device. |
External Device Product ID | [varies] | This varies by manufacturer. |
External Device Serial Number | [varies] | This varies by manufacturer. |
External Device Vendor ID | [varies] | This varies by manufacturer. |
Zone Names | [varies] | These are the zones that the device belongs to. |
Example message for device control events
BlackBerry Protect Desktop: Event Type: DeviceControl, Event Name: fullaccess, Device Name: Test_Device_1, External Device Type: iOS, External Device Vendor ID: 1953, External Device Name: Generic USB Drive - 2017/02/16-01, External Device Product ID: 0202, External Device Serial Number: 575833314133343210041246, Zone Names: (test_zone_02)
For
Windows
, Android
devices may be identified as Still Image or Windows
Portable Device.