USB Drives Are Blocked - Want to Enable for Certain Endpoints

[GeoffSherman]

Hello,

We are very new to having XDR and our onboarding was not very well done. They ended up doing everything on their own and struggling with it all; having mulitple people on the call to show our onboarder how to do things, etc... It was not very helpful for us.

I am looking to either:

1. Edit the original policy for our Windows Endpoints to allow USB drives 100% or...

2. Create a policy duplicate to our default policy and allow USB drives for certain Endpoints (windows endpoints)

Where do I do this in CortexXDR? 

Thanks

[aspatil]

Hello @GeoffSherman ,

My sincere apologies for the inconvenience caused to you. You can reach out to the Accounts Team regarding the issue you have faced.

To resolve this , please follow below instructions:

1. Go to Endponts--> Policy Management--> Extensions--> Profile

2. Look for the profile which is blocking and change Windows Portable Devices - Allow(Either you can check the Assigned Extension Policy Column on which USB is getting blocked in All Endpoint.

Or please open a TAC case, so that Engineer can have the look into the policy.

Hope this helps!

Please mark the response as "Accept as Solution" if it answers your query.