Security Policy
Workspace-wide guardrails for sessions: clipboard, approval, who may connect by code, screen frame, direct connections, idle timeout, watermark, and network access rules.
Where:
/policyOn this page
Session controls
Control
What it does
Clipboard mode
Allow both directions, Technician → remote only, Remote → technician only or Block clipboard.
Ask the person at the computer to accept
Only connect-by-ID + code (default), or Every session, including your own devices. With “every session”, the person signed in at the computer is asked even for your own fleet; if nobody is signed in, the session goes ahead.
Who may connect by ID + code
Anyone with the code (default), Only people signed in to Silux Connect, or Only the list below — then list emails,
*@yourcompany.com patterns or IP / CIDR ranges, one per line.Coloured frame on the remote screen during a session
Shows a border on the remote screen so the person there knows a session is on.
Direct connections
Lets the picture go straight from the computer to the browser when the network allows (faster). Off = always through the relay.
End a session after this many minutes with no keyboard or mouse input (0 = never)
Idle timeout, up to 1440 minutes.
USB control
Allow, No file transfer or Block.
Watermark text · Watermark opacity (0–1)
Text drawn over the session picture, e.g.
{{user.email}} · {{ts}}.Auto-blur on sensitive content
Blurs sensitive content on screen.
Network and access
Plan: The IP, location and work-hours rules are conditional access, included from the Business plan. On other plans the rest of the policy still saves.
Control
What it does
Geo allow-list (ISO codes, comma-separated)
e.g.
US,CA,GB. Sessions can only be started from these countries.IP allow-list (CIDR, comma-separated)
e.g.
10.0.0.0/8, 192.168.0.0/16.IP block-list (CIDR, comma-separated)
Addresses that may never start sessions.
Work hours start / Work hours end
Times in UTC.
Data region
United States, European Union or Asia-Pacific.
Press Save policy (“Policy saved”). Details: Conditional access.
Related help
Conditional access: IP, location and work hours
Limit where and when your team can start remote sessions, with IP allow/block lists, a country allow-list and working hours.
Permission profiles, “ask before connecting” and the connection manager
Control what sessions may do, when the person at the computer must approve, and how they can restrict or end a session while it runs.
Universal clipboard and the clipboard pool
Copy on one computer and paste on another — between your device and a remote, or between two remotes — text and images.