Device Policy
Device Policy in TRASAGATE enables administrators to control access based on the security hygiene of user devices. All device policies are blocking policies, meaning user access is denied if any one of these conditions is met.
Untrusted Devices:
- Block access from devices that are not manually marked as "trusted" by an administrator.
Autologin Enabled:
- Block access if the user can log in without a password.
Idle Screen Lock Disabled:
- Block access if the screen lock is disabled on the device.
Remote Login Enabled (Workstation):
- Block access if remote access (RDP, SSH) is enabled on the device.
Jailbroken Device (Mobile Device):
- Block access if the mobile device is jailbroken or rooted.
Debugging Enabled (Mobile Device):
- Block access if debugging is enabled on the mobile device.
Emulated Device (Mobile Device):
- Block access if the mobile device is an emulated (not a real) device.
Disk Not Encrypted (Workstation):
- Block access if disk encryption is not enabled on the device.
Firewall Disabled (Workstation):
- Block access if the firewall is disabled on the device.
Antivirus Disabled (Windows Only):
- Block access if antivirus protection is disabled.