[KB7837] Add Device control rules and create a Device control report in ESET PROTECT or ESET PROTECT On-Prem

Issue

• Add Device control rules for client devices in ESET PROTECT or ESET PROTECT On-Prem
• Create Device control report
• Add Device control report to ESET PROTECT or ESET PROTECT On-Prem dashboard

Solution

Add Device control rules for client devices in ESET PROTECT or ESET PROTECT On-Prem

Related solutions: Endpoint users

Follow the steps below to create an example rule to block all Bluetooth devices:

1. Open the ESET PROTECT Web Console.

2. Create a policy in ESET PROTECT or ESET PROTECT On-Prem.

3. In the Settings section, select ESET Endpoint for Windows from the drop-down menu. Click Protections → Device control. Enable the toggle next to Enable Device control and click Edit next to Rules.

   Device restart

   Device control may require a device restart to be fully functional.

   

4. Click Add.

   

5. In the Name field, type a name for the rule (in this example, Block bluetooth devices). Select Bluetooth Device from the Device type drop-down menu and select Block from the Action drop-down menu. Click OK.

   Rule configuration

   To make the rule more specific, you can define Vendor, Model or Serial of the devices you want to block.

   Wildcards are supported for Vendor, Model, and Serial fields.

   An asterisk (*) represents a string of zero or more characters.
   A question mark (?) represents a single character.

   

6. The new rule will be displayed in the Rules list. In the Rules list, you can Add, Edit or Remove rules. Click Save.

   

Create Device control report

You can create a Device control report to list all blocked devices with more details.

1. Open the ESET PROTECT Web Console.

2. Click Reports → New Report Template.

   

3. In the Name field, type a name for your report (in this example, Device control). Click <No category selected> and select a category for the report.

   

4. Click Chart and select the check box under Display Table.

   

5. Click Data → Add Column.

   

6. Expand the Computer category, select Computer name and click OK.

   

7. Repeat Steps 5 and 6 to add all items listed below and click Finish. You can add other items based on your preference.

   • Computer . Computer name
   • Device control . Device
   • Device control . Action performed
   • Device control . Time of occurrence
     
     

   

Add Device control report to ESET PROTECT or ESET PROTECT On-Prem dashboard

You can add the Device control report to your dashboard.

1. Open the ESET PROTECT Web Console.

2. Ensure you have the Dashboard open and click the add (plus) icon.

   

3. Type a name for your new dashboard (in this example, Device control) and click Add Dashboard.

   

4. Click the tile you want to use for the Device control report.

   

5. Select your device control report template( in this example, Device control) and click OK.