Frequently Asked Questions (FAQS)

Which policy should I use if duplicate policies exist?

As a general guideline, we recommend that you use the inbuilt features that your UEM console provides and use KSP only for bridging any gaps, that is to apply additional policies that are available only through KSP and KPE.

For example, lets say you want to disable the Bluetooth on a device. If your UEM console already supports disable Bluetooth, then do not use KSP to disable Bluetooth.

If the UEM Console supports all the Knox device restrictions you want to apply on the device, then set up the policy with the UEM  console and do not use the “device restrictions” section of the KSP managed configuration, that is keep “Enable device restriction controls” disabled.

However if you need to use even a single device restriction in KSP, then you should turn on “Enable device restriction controls” and then setup all the device restriction controls within that structure