FortiEDR
FortiEDR automates the protection against advanced threats, pre and post-execution, with real time orchestrated incident response functionality.
dmeeker
Staff
Staff
Article Id 224302
Description

This article describes how to create an exception for a USB device by the company

Scope FortiEDR v 5.0.3+
Solution

1) Go to the Event Viewer tab towards the top of the screen.

 

2) In the drop down towards the left of the event viewer, make sure Device Control is selected.


dmeeker_0-1663696950073.png

 

3) Select the event that triggered the rule.

 

4) Under Triggered Rules - > USB Mass Storage Device input the following
(Change script Current: sandisk* to the manufacturer user want to whitelist using the pencil icon to the right)

 

dmeeker_1-1663697000621.png

 

5) Select save changes.

Contributors