Add or remove external devices from protection exclusions

In this article, you will learn:

• Two ways to manage exclusions from protection

  • Option 1: External devices section (recommended for individual devices)

  • Option 2: Protection exclusions section

• How to add a device to Protection exclusions from the device’s detail
• How to remove a device from Protection exclusions from the device’s detail
• FAQ

Introduction

Protection exclusions allow you to exclude trusted external devices (like approved USB drives or company hardware) from Safetica's protection policies. Excluded devices can operate without restrictions while protection against unauthorized devices is maintained.

Two ways to manage exclusions from protection

Option 1: External devices section (recommended for individual devices)

Best for: Managing specific, individual external devices.

What you can do:

• Add or remove a specific external device from protection exclusions via its detail.
• No need to know or enter the device’s hardware ID.

Limitation: You cannot manage multiple external devices at once.

Learn more here.

Option 2: Protection exclusions section

Best for: Managing whole groups of external devices.

What you can do:

• Add or remove whole groups of external devices (e.g., all USB storage devices) from protection exclusions.
• Create rules for devices from specific manufacturers
• Manage multiple devices with one rule

Limitation: Requires more technical setup for individual devices

Learn more here.

How to add a device to Protection exclusions from the device’s detail

1. Go to External devices.
2. Click the device you want to exclude from protection to open its detail.
3. In the Protection exclusions row, click the three-dot menu.
4. Click Add to protection exclusions.

The device will now appear as Excluded, and its Hardware ID will be added to the Protection exclusions section. Also, policies will no longer apply to this device. Note that this does not apply to Bluetooth devices – policies will continue to apply to them even when excluded. 

How to remove a device from Protection exclusions from the device’s detail

1. Go to External devices.
2. Click the excluded device to open its detail.
3. In the Protection exclusions row, click the three-dot menu.
4. Click Remove from protection exclusions.

The device will now appear as Not excluded, and its Hardware ID will be removed from the Protection exclusions section. Also, policies will apply to this device again.

FAQ

Q: Can I exclude multiple external devices at once?
A: Yes. While in the External devices section, you can only exclude one specific device, the Protection exclusions section allows you to manage groups of external devices (e.g., all USB drives).

Q: Will excluded external devices still appear in records and reports?

A: Yes, excluded external devices are still audited. They're simply not subject to protection policies.

Q: What happens when I exclude an external device that's currently blocked?

A: The external device will immediately become accessible. Policy restrictions will no longer apply to the external device. The only exception is Bluetooth devices – they remain blocked by policies even when added to protection exclusions.

Q: Why is my Bluetooth device still blocked after I added it to protection exclusions?
A: Protection exclusions have no effect on Bluetooth devices. Exclusions work at the level of the device control driver, and Bluetooth devices are not handled by this driver. To allow a Bluetooth device, adjust your policies instead. 

Q: Can I see which external devices are currently excluded?
A: Yes, excluded external devices appear in the Protection exclusions section.