Skip to main content

LevelBlue Completes Acquisition of Cybereason.  Learn More

LevelBlue Completes Acquisition of Cybereason.  Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft Security
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft Security
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

INFO: Policy Customizer Custom Classes and USB Flash Disks

Expand / Collapse


This article applies to:

  • Marshal EndPoint Security

Question:

  • Why are USB flask disks not always shown as belonging to a custom class?

Information:

You can use the Policy Customizer to create custom classes that contain specific USB Flash Disks.

If a custom class contains specific definitions of USB Flash disk(s), they will appear in the "Detected By EndPoint Security" window as assigned to that custom class, as long as the custom class is above the pre-defined "USB Flash disks" class in the Policy Customizer hierarchy.

If the custom class is moved below the pre-defined "USB Flash Disks" then the Policy Class changes to "USB Flash Disks"

To ensure that the custom class applies, place it above "USB Flash Disks" in the hierarchy.

Note:

This behavior is specific to USB Flash Disks and does not affect any other devices that may be detected by EndPoint Security.


To contact Trustwave about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.