Skip Navigation

Add an external storage exclusion

You can add exclusions for external USB mass storage devices when you want to specify the access permissions for specific storage devices. When you add exclusions to the device control policy, you need the device's vendor ID. The product ID and serial number are optional and can also be used if you want to make the exclusion more specific. To ensure that you are using the correct information for each exclusion, you can enable device control then insert a device and look for its log entry in the console (
Protection > External devices
).
Consider the following when you are adding external storage exclusions:
  • Not all manufacturers use a serial number with their products. Some manufacturers use the same serial number for multiple products.
  • External storage exclusions are not editable. Add new exclusions as necessary and delete any exclusions that are no longer needed.
  • There is a limit of 5000 exclusions for each device control policy. The
    Add device
    button is disabled when this limit is reached.
  • The exclusion list is shared between
    Windows
    and
    macOS
    devices when device control is enabled for both OS platforms.
  1. In the console, navigate to
    Settings > Device Policy
    .
  2. Create a new policy or edit an existing policy.
  3. Click the
    Device Control
    tab and make sure that device control is turned on and configured.
  4. In the
    External Storage Exclusion List
    section, click
    Add device
    .
  5. Enter the
    Vendor ID
    .
  6. Optionally, include the
    Product ID
    and
    Serial Number
    to refine the exclusion. You can also add a comment to describe the exclusion.
  7. In the
    Access
    field, select the access level that you want to assign:
    • Full Access
    • Read Only
      This setting applies to
      Windows
      devices only and will be ignored for
      macOS
      devices.
    • Block
  8. Click
    Submit
    .
  9. Save (or create) the policy.