Device Control default task settings
By default, the Device Control task has the settings described in the table below. You can change the values of these settings.
Default Device Control task settings
Setting | Default value | Description |
---|---|---|
Task mode | Statistics only | The task logs information about external devices that were blocked or allowed according to the specified rules. External devices are not actually blocked. You can select the Active mode for device protection to actually block the use of external devices. |
Allow using all external devices when the Device Control task is not running | Not applied | Kaspersky Embedded Systems Security blocks use of external devices, regardless of the Device Control task state. This provides maximum protection level against computer security threats arising when exchanging files with external devices. You can adjust the setting so that Kaspersky Embedded Systems Security allows use of all external devices when the Device Control task is not running. |
Task start schedule | First run is not scheduled. | The Device Control task does not start automatically at the start of Kaspersky Embedded Systems Security. You can configure the task start schedule. |
Rule Generator for Device Control task default settings
Setting | Default value | Description |
---|---|---|
Task mode | Consider system data about all external devices that have ever been connected | The task operation mode. You can select the Consider currently connected external devices only task mode. |
Actions upon task completion | Allowing rules are added to the list of Device Control rules; new rules are merged with existing ones; duplicated rules are removed. | You can add rules to existing ones without merging them and without deleting duplicated rules, or replace existing rules with new allowing rules, or configure export of allowing rules to a file. |
Task start schedule | First run is not scheduled. | The Rule Generator for Device Control task does not start automatically at startup of Kaspersky Embedded Systems Security. You can start the task manually or configure a scheduled start. |