The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Module overview

Prev Next

Device Guard is a Trellix Endpoint module designed to monitor and/or restrict access to USB devices belonging to class Mass Storage or MTP (Media Transfer Protocol). When enabled, it allows administrators to configure a class-based blocking of USB devices on endpoints. Further granular controls allow administrators to create exemptions to these class-based policies to allow/disallow USB mass storage or MTP devices based on their hardware parameters such as Product name, Vendor name and Serial number.