Skip to main content


Best practices

Blocking USB drives through Device Control

In this section, you will learn how to block access to USB drives using Device Control.


Prevent uncontrolled use of USB drives in your environment.


To block access to USB drives, you need to have the Device Control module installed on your endpoints. With Device Control, you can define a rule that restricts USB access, and apply it via policy.


This modification applies only to external storage devices.

To block USB drives through Device Control:

  1. Log in to GravityZone Control Center.

  2. Go to the Policies section.

  3. Find the policy assigned to your target endpoints and click its name to edit it.

  4. Navigate to Device Control > Rules and select the associated toggle to turn on the feature.

  5. Scroll through device classes and click External Storage to define a blocking rule.

  6. Set Permission to Custom to view Custom Permissions.

  7. Find USB and set it to Blocked.

  8. Click Save to apply changes.