How to configure Removable Media Protection to exempt devices

Technical Articles ID: KB81519
Last Modified: 8/13/2019

Environment

McAfee File and Removable Media Protection (FRP) 5.x
McAfee Removable Media Protection 5.x (offsite access options)

For details of FRP supported environments, see KB81149.

Summary

The Device Instance Path ID is used for exempting devices, and the exemptions are based on a substring match.

For example, if the Device Instance Path ID is identified as USBSTOR\DISK&VEN_KINGSTON&PROD_DATATRAVELER_G3&REV_1.00\001CC0EC321DFBC0B7172686&0, any of the following strings can be configured to exempt devices:

String	Comment
KINGSTON	This string exempts all KINGSTON devices
DATATRAVELER	This string exempts all DATATRAVELER models regardless of whether the make is KINGSTON
DISK&VEN_KINGSTON&PROD_DATATRAVELER_G3&REV_1.00

Solution

Identify the USB Device ID, and then add it to the Device Exemptions field:

To identify the Device Instance Path ID, see KB81447.
To add an entry to the Device Exemptions field:
1. Log on to the ePO console.
2. Select the Removable Media Policy.
3. In the USB Removable Media Protection Options section for Exempted Device IDs, click Add.
4. Enter the string against which the Device Instance Path IDs of devices inserted on FRP clients must be matched. For instance, if you want to exempt all Fujitsu devices, add Fujitsu and click OK.
5. Save your changes and apply the policy to the clients.

IMPORTANT:

There is a character limitation of 3072 characters for the Device Exemptions field, so optimize entries in the field based on the guidance above.
NOTE: The above limitation has been removed with FRP 5.1.0. For backwards compatibility issues, see KB90987.
The serial number at the end of the Device Instance Path ID is ignored when you exempt devices. For example, if the entire string 'Device Instance Path ID' is added to the exemption list, the serial number part is filtered out. Only the rest of the string is used in the exemption.
Do not end the Device ID path with a backslash (\) because it leads to the locking down of all policy options. The result is you being unable to edit any of the policy options. For details of this known issue, see KB87674

NOTES:

For USB devices listed under Exempt device IDs, the listed device is not updated with any changes in the encryption policies.
It is impossible to exclude by Device Classes. For example, any iPad or BlackBerry device. This issue is being evaluated for consideration in a future release of the product.

If you require a change to product functionality, submit a new product idea at:

https://community.mcafee.com/t5/Enterprise-Product-Ideas/idb-p/business-ideas

The Ideas forum is accessible only to McAfee business and enterprise customers. Click Sign In and enter your McAfee ServicePortal (https://support.mcafee.com) User ID and password. If you do not yet have a McAfee ServicePortal or McAfee Community account, click Register to register for a new account on either website.

For more information about product ideas, see KB60021.

NOTE: The Ideas forum replaces the previous Product Enhancement Request system.

Related Information

For assistance with modifying policies, see the relevant File and Removable Media Protection Product Guide.

For McAfee product documents, go to the Enterprise Product Documentation portal at https://docs.mcafee.com.

Affected Products

Configuration
File and Removable Media Protection 5.1.x
File and Removable Media Protection 5.0.x

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

How to configure Removable Media Protection to exempt devices

Environment

Summary

Solution

Related Information

Affected Products

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

How to configure Removable Media Protection to exempt devices

Environment

Summary

Solution

Related Information

Affected Products

Glossary of Technical Terms

Choose your region

Title

Title