How to Block and Unblock USB Devices via Saner CVEM

Product Version: Saner CVEM 6.5.0.0

Overview

This article provides step-by-step instructions to block and unblock USB devices on target endpoints using Saner CVEM. USB blocking helps prevent unauthorized data transfers and enhances endpoint security. The feature is accessible under the Application and Device Control section of the Endpoint Management module. You can apply this policy to selected target devices and monitor the status through the task status page.

Steps to Block USB Devices

1. Navigate to Endpoint Management

• Login to the Saner CVEM console.

• Go to Endpoint Management from the Main navigation panel.
  

2. Open Application and Device Control

• Click on the Action icon
  

• Select Application and Device Control from the list of options.
  

3. Configure USB Block Settings

• In the new window, select:

  • Operating System (e.g., Windows)

  • Action Type: Choose Disable Device

• From the list of devices, choose USB.

4. Enter Response Details

• Provide a Response Name and Response Description (for reference and tracking).

5. Select Target Devices

• Choose the devices or groups where you want to apply the USB block policy.

• Click on the Response icon to apply the action.
  

6. Monitor Task Status

• Go to the Task Status page to check the progress.
   

• Once the task is marked as Success, please reboot the device for changes to take effect.

7. Verify USB Block

• After rebooting, USB devices should be blocked on the target system.

Steps to Unblock USB Devices

If you want to unblock USB access on the same device, follow these steps:

1. Repeat steps 1 and 2 to open Application and Device Control.

2. Choose the same Operating System.

3. Under Action Type, select Enable Device.

4. Select USB from the list.

5. Apply the action to the target device.

6. Reboot the device after the task completes successfully.

Conclusion

Using the Application and Device Control feature in Saner CVEM, you can easily manage USB access on endpoints. Make sure to reboot the devices after applying the response to ensure the changes take effect.
If you need any assistance or face issues during the process, please contact the SecPod Support Team.