Get this font in here!
This Article Applies to:
- Avast Business Hub
The Business Hub console offers the USB Protection service with Premium and Ultimate Business Security subscriptions, allowing you to control access to USB flash drives, external HDDs, optical discs, memory cards, digital cameras, smartphones, tablets, and other devices that have storage capabilities. With this service, removable devices won't be able to access your end users’ data without permission.
Support for denying access to smartphones and tablets is currently unavailable for macOS devices.
The Business Agent will install the service. Therefore, the requirements for USB Protection are essentially the same as the base Business Agent requirements.
- 11 — x64
- 10 (Pro, Education, and Enterprise editions) — x64
- 8/8.1 (all versions except RT and Starter Edition) — x64
- 7 SP1
(requires KB3033929)— x64 , x86
- Server 2022, 2019, 2016, 2012 (any edition with latest service pack excluding Server Core) — x64
- Server 2008 R2
(requires KB3033929)— x64
- Small Business Server 2011 — x64
- macOS 11.4 (Big Sur) and higher (and the 7.7 Agent is required)
- 1.5GHz Intel® Pentium® 4 or faster processor (or equivalent), supports SSE3 instructions
- ARM support (in macOS only)
- 1GB RAM
- TCP 80
- TCP 443
To add USB Protection to your devices, you need be subscribed to either Premium or Ultimate Business Security, as the Essential Business Security subscription doesn't offer this service.
To activate an additional subscription or upgrade to Premium or Ultimate Business Security, see Activating and Upgrading Subscriptions.
Once purchased, the subscription will show USB Protection available and the number of devices using the service. Clicking the count link (available once you add the service to one or more devices) will bring you to the Devices page, filtered to show devices with USB Protection enabled.
The USB Protection service will be available for new installations as part of the Business Agent deployment.
For more information on new installations, see
Download the package and execute the installer as usual - the Agent will install alone, and then install USB Protection afterward.
Inside the Business Hub, the USB Protection service can be seen on the Devices page through selecting the USB Protection column.
Once added, the column will display the USB Protection icon and toggle.
Existing devices can add USB Protection post-installation using this toggle — click it so that it turns blue, then confirm the action by clicking Install in the pop-up dialog.
The service will be installed once the Agent syncs with the device.
On the client side, there will be no indications that USB Protection is installed, since the service uses the Business Agent to operate. However, when a device is blocked on an end device, the user will see a notification in the system tray. In this case, if the device should be allowed, they are indicated to contact the administrator, who can then configure the exclusions for USB Protection.
To uninstall USB Protection from a device, click the toggle so that it turns gray, then confirm the action by clicking Uninstall in the pop-up dialog.
You can also bulk change the USB Protection service to off/on via the Manage Services option.
For more information on how to
Configuring USB Protection Settings
To access and configure USB Protection settings:
- Open the Policies page
- Click the desired policy to open its Detail drawer
- Click the Settings tab, then USB Protection
- Expand the USB Protection section
- Choose between allowing and blocking access to removable storage devices (access is allowed by default)
- When blocking access, you can enable the checkbox to not apply the blocking to optical disc drives (a restart is required to be initialized).
You can configure exclusions for
For detailed instructions, see Configuring USB Protection Exclusions.
Overriding Policy Settings
Via the Services tab of a device, you can override its policy configuration for USB Protection by ticking the Manually override policy settings checkbox and selecting the desired setting (allow or block).
To learn more about policy overrides, see
USB Protection Report
The USB Protection report provides an overview of all removable storage device connections to devices in your network within a specified period of time.
To learn more, see USB Protection Report.
By purchasing Premium or Ultimate Business Security. The service cannot be purchased standalone/as an add-on.
The user will receive a notification on-screen that the device was blocked, and to contact their administrator (screenshot available in the Installing and Uninstalling USB Protection section above).
- Policy set to allow changed to block — the inserted/opened USB device will be immediately blocked and closed, with a notification sent to the user on-screen that the device is blocked (screenshot available above).
- Policy set to block changed to allow — the device will immediately be mounted/allowed to open.
From the 7.7 Mac Business Agent release, USB Protection for macOS is available.
All types of USB devices, except in macOS at the moment, where mobiles and tablets are not blocked/monitored.
Business Agent 7.7 and higher.
Other Articles In This Section: