cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
147
Views
1
Helpful
1
Replies

I can use * as a wildcard

diones-naujoks
Level 1
Level 1

We bought a pen drive in bulk and we need to release it in the USB policy. I would like to know if I can use * to release it in bulk.

We use secure endpoint AMP.

1 Reply 1

Matthew Franks
Cisco Employee
Cisco Employee

You can use wildcards. That is what the LIKE operator is used for. As an example, if you have similar product names on your USBs, you can use the following:

My USB name looks like this:

MatthewFranks_1-1731595927340.png

So I created a wildcard rule to block it.

MatthewFranks_0-1731595862778.png

After syncing the policy and plugging in the USB you can see a block event.

MatthewFranks_2-1731596020388.png

Hope that helps.

-Matt