Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How to check which device is blocked by the Device Control feature in the Elements portal?

Issue:

Can we find out which device has been blocked by the Elements Endpoint Protection Device Control feature in the Elements Security Center portal?

Resolution:

When Elements Endpoint Protection Device Control feature blocks a device that matches a Device access rule in the profile, an alert will be sent to the Elements Security Center portal's Events > Security Events page. By clicking on the arrow on the left side of the detection you can show all the details of the block, such as which rule caused the device to be blocked and the Device ID of the blocked device. 

If you want to allow the device which was blocked, you can copy the device id from the security event and follow these steps to create a device filtering rule:

  1. Go to the Security Configurations > profiles page
  2. Open the profile that is in use on the device
  3. Go to the Device control settings page
  4. Scroll down to the Device filtering rules list
  5. Click Add rule
  6. Enter the Device ID that was shown in the security event 
  7. Click Save profile 

Now the device is which was shown in the security event will no longer be blocked by the Elements Endpoint Protection device control feature. 

 

Device Control can list all the devices which are connected to a computer in the Elements Security Center portal. To see the list of devices: 

1. Navigate to the Environment > Devices page
2. Click on a Device
3. Switch to the Connected Devices tab

Here you can see all the devices and their IDs.