Device Guard is a Trellix Endpoint module designed to monitor and/or restrict access to USB devices belonging to class Mass Storage or MTP (Media Transfer Protocol). When enabled, it allows administrators to configure a class-based blocking of USB devices on endpoints. Further granular controls allow administrators to create exemptions to these class-based policies to allow/disallow USB mass storage or MTP devices based on their hardware parameters such as Product name, Vendor name and Serial number.
Module overview
- Published on Sep 11, 2026
- 1 minute(s) read
Was this article helpful?