Device Control

cancel
Showing results for 
Search instead for 
Did you mean: 

Device Control

L0 Member

Can Cortex XDR prevent the use of other USB devices other than Disk Drives, CD-Rom Drives, and Floppy Disk Drives? If one of my users plugs in a printer, can that be denied? Can the same be done with SD cards?

 

3 REPLIES 3

L4 Transporter

Hi @efasoformoso-

 

The device control feature is designed to enforce USB-connected devices.  If the device is connected via an external SD reader, you may be able to block - I would need to test to verify.  You can also block execution from an SD-card by leveraging a restriction profile regardless if the reader is embedded or external.  


You should be able to block the printer.  Here is a list of Windows portable device classes (provided by Microsoft) that Cortex XDR can block.  

 

https://docs.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-classe...

 

Additionally, you are able to create custom device classes. 

 

Hope this helps.


David Falcon 
Solutions Architect, Cortex
Palo Alto Networks® 

Thank you for the response!

Can printers be disallowed on macOS too?

Hi @efasoformoso-

 

At the current time, this is a Windows-only feature.  It is based on the device class for Windows.  macOS is limited to drives.  See doc here:

 

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/hardened-...

 

 


David Falcon 
Solutions Architect, Cortex
Palo Alto Networks® 
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!