Controlling External Device
===========================

- External devices are all devices that can be connected to the Linux system.
- You can control an external device by disabling or removing the external device so that it can request approval for a set period of time.

Step 1. Create Device Group
---------------------------

- A device group is a function that defines a set of devices required for control. It can be used for blocking or exception on the policy.


#. Go to **Policy** in the top panel.
#. Go to **External Device Group** in the left Policy panel.
#. Click **Tasks > Create.**
#. Find **General** section enter unique **ID name.** (*e.g. "USB Storage Devices"*)
#. Select **OS Type > Linux** in Device Group Setting section.
#. Click *Conditions > Add** and select **Device Name** to control.
#. Find **Settings** section enter the following:
#. If the deivce type is USB Disk, you can specify following information.

   - **USB Vendor**: Specify USB Vendor name.
   - **USB Model**: Specify USB Model name.
   - **USB Serial No.**: Specify USB Serial Number.

   .. note:: Conditions must be defined in accordance with the language settings of the endpoints operating system.  
   
#. Click **Add.**
#. Click **Save.**

Step 2. Create External Device Policy
-------------------------------------

+ Control External Device Policy defines the device groups to block or allow the target to perform device control.
+ When the plugin is uploaded, the device policy for the basic output device is provided as a template. (Device Control Policy ID: Data Prevention)

#. Go to **Policy** in the top panel.
#. Go to **Policy > External Device Policy** in the left Policy panel.
#. Click **Tasks > Create**
#. Find **General** section enter unique **ID name.** (*e.g. "USB Storage Policy"*)
#. Find **Node Group** section click **Assign** and choose **Node Group**
#. Find **External Devices** section click **Assign** and choose **USB Storage Devices.** (You can select **Default Device Group** below.)
#. Click **Save.**
#. Click **Apply.**

**External Device Exceptions :**


+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **USB Disk**         |- Storage devices of USB type.                                                                                   |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **CD/DVD**           |- Devices in CD-ROM Drive Class                                                                                  |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **USB Network**      |- Network connected to USB port.                                                                                 |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Local Printer**    |- Printer connected directly to local PC.                                                                        |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Bluetooth**        |- All devices in bluetooth class.                                                                                |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Camera**           |- All devices in camera class.                                                                                   |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Mouse**            |- All devices in mouse class.                                                                                    |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Keyboard**         |- All devices in keyboard class.                                                                                 |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Sound**            |- All devices in sound class.                                                                                    |
+----------------------+-----------------------------------------------------------------------------------------------------------------+
| **Microphone**       |- All devices in microphone class.                                                                               |
+----------------------+-----------------------------------------------------------------------------------------------------------------+

#. Click the **Create** button.

Step 3. Configure Control External Device Plugin
------------------------------------------------

#. Go to **Policy** in the top panel.
#. Go to **Policy > Node Policy > Agent Action** in the left Policy panel.
#. Find and click **Control External Device.**
#. Find **Agent Action > Control Methods** section and choose to **Disable** or **Uninstall.**
#. Click **Update.**

Step 4. Enable Agent Action on Node Policy
------------------------------------------

#. Go to **Policy** in the top panel.
#. Go to **Policy > Node Policy** in the left Policy panel.
#. Click the **desired Policy ID** in Node Policy window.
#. Find **Agent Action**. Click **Assign.**
#. Find **Control External Device** in the **Available** section. Select and drag it into the **Selected** section.
#. Click **Add.**
#. Click **Update.**