Cortex XDR_ Device Control Violation_ Policy Management

Seth_Sakshi — Wed, 27 Mar 2024 07:37:29 GMT

Hello All,

Whenever the user is connecting any device in the system which is not allowed, we get the logs in the device control violation regarding that device.

In such case, what changes are required-

a) Allow the device through device permanent/temporary exception only

b) Allow the access through device configuration in extension policy- like disk drive, CD-DVD rom, windows portable device etc only.

c) Or both the above.

Thanks in advance.

Regards,

Sakshi Seth

Re: Cortex XDR_ Device Control Violation_ Policy Management

aspatil — Mon, 01 Apr 2024 08:04:30 GMT

Thanks for reaching out on LiveCommunity!

Your requirement is completely depends on your organisation policy. If you want granular control then you can go with B.

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.