Add an exeption for device control manually + documentation

Question

Hello all, is there no way to add the instance ID of a device manually? First blocking the stick being a requirement is very unpractical for bigger companies. The documentation of the exemptions is also very bad, after you made an exeption you dont see: 
 
 when was it made 
 which model was it 
 who was the person using it 
 
 There is definitly a lot of programming to do on your side, so that this feature is acceptable according to safety regulations. I also saw a post from someone asking to implement a field for notes here. Sadly he was just ignored and his post was closed after one year... For now please let me know if there is any way to add an exeption without the requirement of inserting the specific device. Without this we cannot smoothly handle the transition to encrypted storage devices... Please do not ignore me like the other guy. Best regards Adrian

Qoosh · Accepted Answer

Hi Adrian, 
 Thanks for reaching out to us. 
 It is not possible to add devices to the peripheral exemptions list before they have been detected by the endpoints. The Sophos Endpoint software installed on the local devices will report back what is found when peripherals are plugged in. Only once they are present in Sophos Central will you be able to define an exclusion for the peripheral. 
 It is recommended to leave this in "Monitor" mode when you are first rolling out the feature so that the list can be populated first.

RichardP · Answer

Also, a good practice is to have a test machine that has this set to monitor in a separate policy. That way you can harvest the IDs of new devices by plugging them into the test machine.

Add an exeption for device control manually + documentation

Top Replies