Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: USB Defender & Specific Device Types

$
0
0

Firstly, if you're using UDLP you'll need to make sure that the devices are included in the white list.  UDLP is evaluated FIRST and then the information goes to the LEM to trigger a rule if it applies.

 

There are plenty of ways to set up the rule, but you will want to be mindful of your grouping and operators if you're using multiple lines like that (instead of including the devices in the allowed group, for example).

 

If you've tested with a device included in the UDLP list and it's still being blocked then if you can post a screenshot of your rule correlation we may be able to better assist from there.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>