Patent ID: 8484327

Claim:
A method for device management in a computer system comprising: detecting connection of a device to the computer system, which includes a software agent that is configured to track attempts to connect pluggable devices to the computer system and to receive a security policy that includes a plurality of device management rules, wherein the software agent is further configured to register an agent device connection listener in a form of an upper-level filter driver in a device class stack for a particular device class defined in a particular one of the rules, and wherein the particular one of the rules describes a device definition, a set of computers, and a set of users to which the particular rule applies; identifying a specific device type of the device; and determining a reaction to perform in response to the connection of the device to the computer system based, at least in part, on parameters related to the device and on the device management rules, wherein the reaction comprises blocking certain network connections based on identifying whether or not the connection is wireless.