68123: Acronis DLP: How to resolve the issue of DeviceLock detecting authorized devices as keyloggers

Last update: 30-04-2021

Description

Device Controle module of Acronis Cyber Protect Cloud can wrongly detect some devices (especially composite ones) as keyloggers. This article contains instructions on overcoming the issue.

How-to

To resolve the issue it is necessary to add the problem DeviceID which is false detected as keylogger into USB devices allowlist.

If the problem USB DeviceID is unknown, check local Event Viewer of the affected machine and find in DeviceLock Log Event ID 42 and Action: Keylogger Detected.

Copy USB\VID_xxxx&PID_xxxx information from the event.

In the Protection Plan applied to the affected computer, enter the problem DeviceID to USB devices database, and then to USB allowlist as shown on the pictures below.

 

Tags: