<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Device Control - Exception in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/device-control-exception/m-p/412512#M791</link>
    <description>&lt;P&gt;Dear guru,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Currently testing the flexibility of the Device Control Feature under XDR.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Aim:&lt;/P&gt;&lt;P&gt;Block all the mobile phone connecting to Endpoint except some VIPs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devices, apply a the Device Exception for the VIPs may be the way to do so.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;However, when configuring the exceptions, after select the Type and Vendor, it could not locate the right product ID/code from the pull-down menu.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is it possible&amp;nbsp;&lt;/P&gt;&lt;P&gt;1) Add the Product ID/Code manually?&lt;/P&gt;&lt;P&gt;2) Except the devices by the full Device ID?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please find the screen cap for further explanation.&lt;/P&gt;&lt;P&gt;Any one has the same issue?&lt;/P&gt;&lt;P&gt;Million thanks,&lt;/P&gt;&lt;P&gt;Sean&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Endpoint_DeviceControl_Exception.PNG" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/34359i8A3B024FBB43EA7A/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Endpoint_DeviceControl_Exception.PNG" alt="Endpoint_DeviceControl_Exception.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;</description>
    <pubDate>Fri, 11 Jun 2021 11:00:55 GMT</pubDate>
    <dc:creator>SeanDeHarris</dc:creator>
    <dc:date>2021-06-11T11:00:55Z</dc:date>
    <item>
      <title>Device Control - Exception</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/device-control-exception/m-p/412512#M791</link>
      <description>&lt;P&gt;Dear guru,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Currently testing the flexibility of the Device Control Feature under XDR.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Aim:&lt;/P&gt;&lt;P&gt;Block all the mobile phone connecting to Endpoint except some VIPs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devices, apply a the Device Exception for the VIPs may be the way to do so.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;However, when configuring the exceptions, after select the Type and Vendor, it could not locate the right product ID/code from the pull-down menu.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is it possible&amp;nbsp;&lt;/P&gt;&lt;P&gt;1) Add the Product ID/Code manually?&lt;/P&gt;&lt;P&gt;2) Except the devices by the full Device ID?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please find the screen cap for further explanation.&lt;/P&gt;&lt;P&gt;Any one has the same issue?&lt;/P&gt;&lt;P&gt;Million thanks,&lt;/P&gt;&lt;P&gt;Sean&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Endpoint_DeviceControl_Exception.PNG" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/34359i8A3B024FBB43EA7A/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Endpoint_DeviceControl_Exception.PNG" alt="Endpoint_DeviceControl_Exception.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;</description>
      <pubDate>Fri, 11 Jun 2021 11:00:55 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/device-control-exception/m-p/412512#M791</guid>
      <dc:creator>SeanDeHarris</dc:creator>
      <dc:date>2021-06-11T11:00:55Z</dc:date>
    </item>
    <item>
      <title>Re: Device Control - Exception</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/device-control-exception/m-p/412588#M793</link>
      <description>&lt;BLOCKQUOTE&gt;&lt;HR /&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/184443"&gt;@SeanDeHarris&lt;/a&gt;&amp;nbsp;wrote:&lt;BR /&gt;&lt;P&gt;Dear guru,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Currently testing the flexibility of the Device Control Feature under XDR.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Aim:&lt;/P&gt;&lt;P&gt;Block all the mobile phone connecting to Endpoint except some VIPs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devices, apply a the Device Exception for the VIPs may be the way to do so.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;However, when configuring the exceptions, after select the Type and Vendor, it could not locate the right product ID/code from the pull-down menu.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is it possible&amp;nbsp;&lt;/P&gt;&lt;P&gt;1) Add the Product ID/Code manually?&lt;/P&gt;&lt;P&gt;2) Except the devices by the full Device ID?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Please find the screen cap for further explanation.&lt;/P&gt;&lt;P&gt;Any one has the same issue?&lt;/P&gt;&lt;P&gt;Million thanks,&lt;/P&gt;&lt;P&gt;Sean&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Endpoint_DeviceControl_Exception.PNG" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/34359i8A3B024FBB43EA7A/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Endpoint_DeviceControl_Exception.PNG" alt="Endpoint_DeviceControl_Exception.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;&lt;HR /&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/184443"&gt;@SeanDeHarris&lt;/a&gt;&amp;nbsp;,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;As for question one, you must submit your product code as hex. Simply present the value in the hex format like so: 0x000. Here's an example as well:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Custom_Product_Code_take_III.gif" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/34368iC68BBAD160E34271/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="Custom_Product_Code_take_III.gif" alt="Custom_Product_Code_take_III.gif" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;As for creating an exception for a device by ID, that is not available at this time. To create an exception the following parameters used at this time:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;Type (Required)&lt;/LI&gt;&lt;LI&gt;Vendor (Required)&lt;/LI&gt;&lt;LI&gt;Product Code (Optional)&lt;/LI&gt;&lt;LI&gt;Serial Number (Optional)&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;I hope this helps!&lt;/P&gt;</description>
      <pubDate>Fri, 11 Jun 2021 15:40:35 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/device-control-exception/m-p/412588#M793</guid>
      <dc:creator>gjenkins</dc:creator>
      <dc:date>2021-06-11T15:40:35Z</dc:date>
    </item>
  </channel>
</rss>

