Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual page 88

NOTE: Location-based Storage Device Control settings override the global settings. For example,
you might define that at the Work location, all external storage devices are permitted, while
allowing only the global default at all other locations, limiting users to the devices on the preferred
list.
USB Connectivity
All devices that connect via the USB BUS can be allowed or denied by policy. These devices can be
scanned into the policy from the USB Device Inventory report or by scanning all devices currently
connected to a machine. These devices can be filtered based on manufacturer, product name, serial
numbers, type, and so forth.
For support purposes, the administrator can configure the policy to accept a set of devices, either by
manufacturer type, (for example, all HP devices are allowed), or by product type (all USB-human
interface devices [mouse and keyboard] are allowed). Additionally, individual devices can be
permitted to prevent non-supported devices from being introduced into the network (for example, no
printers are allowed except for this one).
To access this control, click the Global Policy Settings tab, then click USB Connectivity in the policy
tree on the left.
USB Connectivity page.
Figure 6-11
Access is first evaluated based on whether the bus is active or not. This is determined by the USB
Devices setting. If this setting is set to Disable All Access, the device is disabled and evaluation
stops. If this setting is set to Allow All Access, the client continues the evaluation and set looking for
88 ZENworks Endpoint Security Management Administration Guide