Specifications

Protecting Computers from Security Risks
5-65
Device Control
OfficeScan provides a device control feature that regulates access to external storage
devices and network resources connected to computers. Device control helps prevent
data loss and leakage and, combined with file scanning, helps guard against security
risks.
Device Control is available only on computers running x86 type platforms.
To manage access to external devices:
PATH: NETWORKED COMPUTERS > CLIENT MANAGEMENT > SETTINGS > DEVICE CONTROL
1. Select the check box to enable device control.
2. Choose whether to block or allow the AutoRun function (autorun.inf) on USB
devices connected to the computer.
3. Select the permissions for each device type.
TABLE 5-35. Device permissions
PERMISSIONS FILES ON THE DEVICE INCOMING FILES
Full access Operations allowed: Copy,
Move, Open, Save, Delete,
Execute
Operations allowed: Save,
Move, Copy
This means that a file can
be saved, moved, and
copied to the device.
Read and
write only
Operations allowed: Copy,
Move, Open, Save, Delete
Operation blocked:
Execute
Operations allowed: Save,
Move, Copy
Read and
execute only
Operations allowed: Copy,
Open, Execute
Operations blocked: Save,
Move, Delete
Operations blocked: Save,
Move, Copy