Device security policy enables administrators of SandBlast Mobile Dashboard to adjust device risk when the device meets certain conditions.
In addition to the policy settings introduced in v2.62, device security policy options were extended with additional policy settings to enable dashboard administrators to set device risk in the following conditions:
Android
- Device verified boot is disabled
- Device OS SELinux is in permissive mode
- Device storage is not encrypted
- Device is not protected with screen lock setting
- Device unknown sources setting is enabled
- Device USB debugging setting is enabled
iOS
- Device configured to work with Proxy or Global Proxy
To configure, navigate to Settings > Policy Settings > Device. Click "Save" if any changes are made.
![](/legacyfs/online/checkpoint/62150_device_security_policy_expanded.jpg)
Originally introduced in v2.62, and enhanced in v2.66.