Device templates (definitions) specify the properties of a device to trigger the rule.
Device templates can be created as described below, by importing from a CSV file, from a device plug incident in the DLP Incident Manager, or with a script containing REST API calls. The administrator running the script must be a valid ePO - On-prem user who has permissions in ePO - On-prem Permission Sets to perform the actions that are invoked by the APIs.
Tip
Create excluded plug-and-play definitions for devices that do not cleanly handle management, which could cause the system to stop responding or create other serious problems. No action is taken on these devices even when a rule is triggered.
In ePO - On-prem, select Menu → Data Protection → DLP Policy Manager → Definitions.
In the left pane, select Device Control → Device Templates.
Select Actions → New Item, then select the type of definition.
Enter a unique Name and optional Description.
(Plug and Play and Removable Storage devices only) Select the Applies to option for Microsoft Windows or OS X devices.
The Available Properties list changes to match properties for the operating system selected.
Select properties for the device.
Note
The available properties list varies depending on the type of device.
To add a property, click >.
To remove a property, click <.
To add another value for the property, click +.
Values are added as logical OR by default. Click the and/or button to change it to AND.
To remove properties, click -.
Click Save.