Aurora Protect Desktop device control

When this option is selected, any device control events will be logged to the syslog server.

Field Value Description

Device Name

[varies]

This is the name of the device associated with the device control event.

Event Type

DeviceControl

This is the type of event.

Event Name

Blocked

A USB mass storage device cannot be used on the device (set in device policy).

Fullaccess

A USB mass storage device can be used on the device (set in device policy).

Readonly

A USB mass storage device can be used with read-only access on the device (set in device policy).

External Device Type

AndroidUSB

The external device is an Android device.

iOS

The external device is an iOS device.

StillImage

This external device is a still image device, like a camera.

USBCDDVDRW

This external device is a USB disc drive (CD, DVD, Blu-ray).

USBDrive

This external device is a USB drive, like a thumb drive.

VMWareMount

This external device is a VMware USB PassThrough.

WPD

This external device is a Windows Portable Device.

External Device Name

[varies]

The name given to the external device.

External Device Product ID

[varies]

This varies by manufacturer.

External Device Serial Number

[varies]

This varies by manufacturer.

External Device Vendor ID

[varies]

This varies by manufacturer.

Zone Names

[varies]

These are the zones that the device belongs to.

Example message for device control events

CODE
BlackBerry Protect Desktop: Event Type: DeviceControl, Event Name: fullaccess, Device Name: Test_Device_1, External Device Type: iOS, External Device Vendor ID: 1953, External Device Name: Generic USB Drive - 2017/02/16-01, External Device Product ID: 0202, External Device Serial Number: 575833314133343210041246, Zone Names: (test_zone_02)

For Windows, Android devices may be identified as Still Image or Windows Portable Device.