Cortex XDR_ Device Control Violation_ Policy Management

[Seth_Sakshi]

Hello All,

Whenever the user is connecting any device in the system which is not allowed, we get the logs in the device control violation regarding that device.

In such case, what changes are required-

a) Allow the device through device permanent/temporary exception only

b) Allow the access through device configuration in extension policy- like disk drive, CD-DVD rom, windows portable device etc only.

c) Or both the above.

Thanks in advance.

Regards,

Sakshi Seth

[aspatil]

Hello @Seth_Sakshi ,

Thanks for reaching out on LiveCommunity!

Your requirement is completely depends on your organisation policy. If you want granular control then you can go with B.

If you feel this has answered your query, please let us know by clicking on "mark this as a Solution". Thank you.