Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Log & Event Manager (LEM) > Allow a new USB device that is blocked

Allow a new USB device that is blocked

Table of contents

Updated September 1, 2016

Overview

A USB device is being blocked for unauthorized USB device rule. This article shows how to add a new USB device to be allowed on your network.

Environment

All LEM versions

Steps

  1. Go to Build > Rules > search for USB > find your name for your USB Authorized USB Devices.
  2. Remember that name then  go to Build > Groups > search for USB > click on gear beside the Name of your Authorized USB devices.
  3. You can add the new USB device if you know the Unique ID.
    If not, jump to step 4 > give it a Name > the DATA is going to be the unique USB ID for that device and then you can give it a description. 
    Note: If you do not have the USB unique ID, it may have been blocked from the rules.
  4. Click Explore > Events (Orange Triangle):
    a. In the white box under Events, type internalrule.
    b. Click on the InternalRuleFired and hold down your left mouse button and drag it to the top.
    c. Change time frame on the far right and then just find the rule that blocked the USB device.

 

Last modified

Tags

Classifications

Public