Peripheral Control: Allow to apply multiple policies per group
Make peripheral control act more like a firewall. Currenlty I can only apply one policy per user/group. If I apply multiple, Sophos will only choose the highest priority and Ignore any other policies.
We have Users where everything except mouse and keyboard is blocked. We want to add permissions with multiple policies. One policy adds access to wlan and another one adds access to printers and scanners. Currently I have to clone the base policy and add permissions to the cloned ones. That means any change in base policy must also be applied to every cloned policy.
We would have to create policies like: block everything, block everything except scanners/printers and wlan, block everything except wlan, block everything except printers and scanners, ....
What we want is:
base policy: block everything
allow printers/scanners (adds printers and scanners to base policy)
allow wlan (adds wlan permission without overriding base policy and other applied policies)
This current bahavior doesnt suit our requirements so we are forced to apply a much more static (and probably more insecure) way to do peripheral control or use an alternative product which is capable to add permissions by adding multiple groups to users.
Is there a plan to implement a feature like this?