Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Setup
  4. Cylance Endpoint Security Setup Guide
  5. Setting up CylancePROTECT Desktop
  6. Using device policies to manage CylancePROTECT Desktop devices
  7. Device control
  8. Add an external storage exclusion

Add an external storage exclusion

You can add exclusions for external USB mass storage devices when you want to specify the access permissions for specific storage devices. When you add exclusions to the device control policy, you need the device's vendor ID. The product ID and serial number are optional and can also be used if you want to make the exclusion more specific. To ensure that you are using the correct information for each exclusion, you can enable device control then insert a device and look for its log entry in the console (
Protection > External devices
).
Consider the following when you are adding external storage exclusions:
  • Not all manufacturers use a serial number with their products. Some manufacturers use the same serial number for multiple products.
  • External storage exclusions are not editable. Add new exclusions as necessary and delete any exclusions that are no longer needed.
  • There is a limit of 5000 exclusions for each device control policy. The
    Add device
     button is disabled when this limit is reached.
  • The exclusion list is shared between
    Windows
     and
    macOS
     devices when device control is enabled for both OS platforms.
  1. In the console, navigate to
    Settings > Device Policy
    .
  2. Create a new policy or edit an existing policy.
  3. Click the
    Device Control
     tab and make sure that device control is turned on and configured.
  4. In the
    External Storage Exclusion List
     section, click
    Add device
    .
  5. Enter the
    Vendor ID
    .
  6. Optionally, include the
    Product ID
     and
    Serial Number
     to refine the exclusion. You can also add a comment to describe the exclusion.
  7. In the
    Access
     field, select the access level that you want to assign:
    • Full Access
    • Read Only
      This setting applies to
      Windows
       devices only and will be ignored for
      macOS
       devices.
    • Block
  8. Click
    Submit
    .
  9. Save (or create) the policy.