The Application and Device Control policy has two parts:
Application Control contains one or more rule sets. Each rule set contains one or more rules. You configure properties, conditions and actions for each rule.
Device control consists of a list of blocked devices and a list of devices that are excluded from blocking. You can add to these two lists and manage their contents.
Figure: Application and Device Control policy structure illustrates the application and device control components and how they relate to each other.