Managing Device Control via the Application Console Web Plug-in

In this section, you will learn how to navigate the Web Plug-in interface and configure task settings on a protected device.

1. In the main window of the Kaspersky Security Center Web Console, select Devices → Policies & profiles.
2. Click the policy name you want to configure.
3. In the <Policy name> window that opens select the Application settings tab.
4. Select the Local activity control section.
5. Click the Settings button in the Device control subsection.
6. Configure the settings described in the table below.

   Device Control task settings

   Setting	Description
   Active	Kaspersky Industrial CyberSecurity for Nodes applies rules to control the connection of removable drives and other external devices, and allows or blocks the use of all devices according to the Default Deny principle and specified allowing rules. The use of trusted external devices is allowed. The use of untrusted external devices is blocked by default.
   Statistics only	Kaspersky Industrial CyberSecurity for Nodes does not control the connection of removable drives and other external devices, but only logs information about the connection and registration of external devices on a protected device, and about the Device Control allowing rules triggered by the connected devices. The use of all external devices is allowed. This mode is set by default.
   Allow using all external devices when the Device Control task is not running	The check box allows or blocks the use of external devices when the Device Control task is not running. If the check box is selected and Device Control task is not running, Kaspersky Industrial CyberSecurity for Nodes allows using any external devices on a protected device. If the check box is cleared, the application blocks the use of untrusted external devices on a protected device in the following cases: the Device Control task is not running or the Kaspersky Security Service is turned off. This option is recommended to maximize the level of protection against computer security threats arising when exchanging files with external devices. By default, the check box is cleared.
   Device control rules	You can edit the list of Device control rules.
   Task management	You can configure settings to start the task on a schedule.