Xcitium Enterprise

• Introduction To Xcitium Client Security
  • Special Features
  • System Requirements
  • Install Xcitium Client Security
  • Start Xcitium Client Security
  • The Main Interface
    • The Home Screen
    • The Tasks Interface
    • The Widget
    • The System Tray Icon
  • Understand Security Alerts
  • Password Protection
• General Tasks - Introduction
  • Scan And Clean Your Computer
    • Run A Quick Scan
    • Run A Full Computer Scan
    • Run A Rating Scan
    • Run A Custom Scan
      • Create, Schedule And Run A Custom Scan Profile
    • Automatically Scan Unrecognized And Quarantined Files
  • Instantly Scan Files And Folders
  • Process Infected Files
  • Manage Virus Database Updates
  • Manage Blocked Autoruns
  • Manage Quarantined Items
• Firewall Tasks - Introduction
  • Configure Internet Access Rights For Applications
  • Stealth Your Computer Ports
  • Manage Network Connections
  • Stop All Network Activities
  • View Active Internet Connections
• Containment Tasks - Introduction
  • Run An Application In The Container
  • Reset The Container
  • Identify And Kill Unsafe Running Processes
  • Open Shared Space
  • The Virtual Desktop
    • Start The Virtual Desktop
    • The Main Interface
    • Run Browsers Inside The Virtual Desktop
    • Open Files And Run Applications Inside The Virtual Desktop
    • Pause And Resume The Virtual Desktop
    • Close The Virtual Desktop
• DLP Tasks - Introduction
  • Run Data Loss Prevention Scans
  • Manage DLP Quarantined Files
• Advanced Tasks - Introduction
  • Create A Rescue Disk
    • Download And Burn Comodo Rescue Disk
  • Remove Deeply Hidden Malware
  • Manage XCS Tasks
  • View XCS Logs
    • Antivirus Logs
    • VirusScope Logs
    • Firewall Logs
    • HIPS Logs
    • Containment Logs
    • Website Filtering Logs
    • Device Control Logs
    • Autorun Event Logs
    • Alerts Logs
    • XCS Tasks Logs
    • File List Changes Logs
    • Vendor List Changes Logs
    • Configuration Changes Logs
    • Virtual Desktop Event Logs
    • Data Loss Prevention Event Logs
    • Search And Filter Logs
  • Submit Files For Analysis To Xcitium
  • View Active Process List
• XCS Advanced Settings
  • General Settings
    • Customize User Interface
    • Configure Virus Database Updates
    • Log Settings
    • Manage XCS Configurations
      • Xcitium Preset Configurations
      • Personal Configurations
    • Manage Performance
  • Antivirus Configuration
    • Real-time Scanner Settings
    • Scan Profiles
  • Firewall Configuration
    • General Firewall Settings
    • Application Rules
    • Global Rules
    • Firewall Rule Sets
    • Network Zones
      • Network Zones
      • Blocked Zones
    • Port Sets
  • HIPS Configuration
    • HIPS Settings
    • Active HIPS Rules
    • HIPS Rule Sets
    • HIPS Groups
      • Registry Groups
      • COM Groups
  • Protected Objects
    • Protected Objects - HIPS
      • Protected Files
      • Blocked Files
      • Protected Registry Keys
      • Protected COM Interfaces
    • Protected Objects - Containment
      • Protected Files And Folders
      • Protected Keys
  • Data Loss Prevention
    • DLP Monitoring Rules
    • DLP Discovery Rules
    • DLP Keyword Groups
  • Containment Settings
    • Containment Settings
    • Auto-Containment Rules
    • Virtual Desktop Settings
    • Containment - An Overview
    • Unknown Files - The Scanning Processes
  • File Rating Configuration
    • File Rating Settings
    • File Groups
    • Submitted Files
  • Advanced Protection
    • VirusScope Settings
    • Scan Exclusions
    • Device Control Settings
    • Script Analysis Settings
    • Miscellaneous Settings
  • Web Filter Settings
    • Website Filtering Rules
    • Website Categories
• Appendix 1 - XCS How To... Tutorials
  • Enable / Disable AV, Firewall, Auto-Containment And VirusScope Easily
  • Set Up The Firewall For Maximum Security And Usability
  • Block Internet Access While Allowing Local Area Network (LAN) Access
  • Block / Allow Specific Websites To Specific Users
  • Set Up HIPS For Maximum Security And Usability
  • Create Rules To Auto-Contain Applications
  • Run An Instant Antivirus Scan On Selected Items
  • Create An Antivirus Scan Schedule
  • Run Untrusted Programs Inside The Container
  • Run Browsers Inside The Container
  • Restore Incorrectly Quarantined Items
  • Submit Quarantined Items To Xcitium Verdict Cloud For Analysis
  • Enable File Sharing Applications Like BitTorrent And Emule
  • Block Any Downloads Of A Specific File Type
  • Disable Auto-Containment On A Per-application Basis
  • Switch Off Automatic Antivirus Updates
  • Suppress XCS Alerts Temporarily
  • Control External Device Accessibility
• Appendix 2 - Xcitium Secure DNS Service
  • Router - Manually Enable Or Disable Xcitium Secure DNS
  • Windows - Enable Xcitium Secure DNS
• About Xcitium

Device Control Settings

• Click 'Settings' > 'Advanced Protection' > 'Device Control'

• The 'Device Control' panel lets you specify types of external devices that are to be blocked and define exclusions to it

Open the Device Control panel

• Click 'Settings' on the XCS home screen

• Click 'Advanced Protection' > 'Device Control'

 

• Enable Device Control – Activate the device control functionality to selectively prohibit access to external devices. You should specify devices to be banned in the 'Blocked Devices' pane. (Default = Enabled)
  

• Log Detected Devices - XCS logs events like connection attempts of external devices. (Default = Enabled)

• Show Notifications when devices are being disabled or enabled – XCS displays an alert whenever an external device is connected or disconnected. (Default = Disabled)

• Blocked Devices – List of external device classes which are not allowed to connect to the endpoint. Example classes include 'USB Storage Devices', 'CD/DVD Drives', 'BlueTooth Devices' and 'Firewire Devices'.

• Exclusions - Add exceptions to a blocked class. For example, if you wish block the class 'USB Devices' but wish to allow access for your company's authentication tokens, then you should add those USB tokens as exceptions.

Click the following links for more information on blocked devices and exclusions:

• Block devices

• Specify exclusions

Block Device

You can specify devices to be blocked in three ways:

• Select device classes

• Select from currently connected devices

• Specify custom devices

Block a device class

• Click 'Settings' on the XCS home screen

• Click 'Advanced Protection' > 'Device Control'

• Open the 'Blocked Devices' tab then click the 'Add' button

• Click 'Add device class' from the options:

 

• Choose the device class you wish to block.

• For example, to block all USB devices that are plugged to your computer, select “Portal devices” from the list

• If you want to exclude any specific device from this class, enter the device name in the exclusion list.

 

• Click the '+' sign next to the class to which your device belongs

• Select the device(s) you wish to block

• Click 'OK' in the screen and again 'OK' in the 'Advanced Settings' interface.

Select devices from currently connected devices

• Click 'Settings' on the XCS home screen

• Click 'Advanced Protection' > 'Device Control'

• Open the 'Blocked Devices' tab then click the 'Add' button

• Click 'Add existing device' from the options

 

• Choose the device class you wish to block. For example, Network adapter devices, CD/DVD drives, Storage devices or Disk drives.

• Click the '+' sign of the class to which your device belongs

• Select the device(s) you wish to block

• Click 'OK' and again click 'OK' in the 'Device Control' panel to save your settings.
  

Specify a custom devices to be blocked

• Click 'Settings' on the XCS home screen

• Click 'Advanced Protection' > 'Device Control'

• Open the 'Blocked Devices' tab then click the 'Add' button

• Click 'Add custom device' from the options

• Enter the device ID and click 'OK'.

Specify exclusions

The 'Exclusions' tab lets you allow access to specific devices that fall within a blocked device class.

You can specify the exceptions in two ways:

• Select from currently connected devices

• Specify a custom device

Add exclusions from currently connected devices

You need to add the device to the exclusion list before blocking the device class.

• Make sure the external device is connected to the computer

• Click 'Settings' on the XCS home screen

• Click 'Advanced Protection' > 'Device Control'

• Open the 'Exclusions' tab then click the 'Add' button

• Click 'Add existing device' from the options

• Click the '+' sign of the class to which your device belongs

• Select the device(s) you wish to exclude

• Click 'OK' in the screen and again 'OK' in the 'Advanced Settings' interface.

Add custom device to be excluded

• You can also add exclusions by specifying the device Ids.

• For example, you want to block all USB storage devices apart from the type of SANDISK devices used by your company, you could specify a device exclusion ID of 'USBSTOR/DISK&VEN_SANDISK/4C5310*'.

• You can also use the wildcard character - ' * ' to cover a range of devices

Specify custom devices to be excluded

• Click 'Settings' on the XCS home screen

• Click 'Advanced Protection' > 'Device Control'

• Open the 'Exclusions' tab then click the 'Add' button

• Select 'Add custom device' from the options

• Enter the unique device identifier in the 'Device ID' field, for example to exclude all USB storage devices whose device IDs start with "4C5310", you could enter: USBSTOR/DISK&VEN_SANDISK/4C5310*

• Click 'OK' in the screen and again 'OK' in the 'Advanced Settings' interface.