Device Control - Exception

[SeanDeHarris]

Dear guru,

Currently testing the flexibility of the Device Control Feature under XDR.

Aim:

Block all the mobile phone connecting to Endpoint except some VIPs.

Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devices, apply a the Device Exception for the VIPs may be the way to do so.

However, when configuring the exceptions, after select the Type and Vendor, it could not locate the right product ID/code from the pull-down menu.

Is it possible 

1) Add the Product ID/Code manually?

2) Except the devices by the full Device ID?

Please find the screen cap for further explanation.

Any one has the same issue?

Million thanks,

Sean

 

[gjenkins]

---

@SeanDeHarris wrote:

Dear guru,

Currently testing the flexibility of the Device Control Feature under XDR.

Aim:

Block all the mobile phone connecting to Endpoint except some VIPs.

Gone thru the Admin manual, added a Device Config policy to block all Windows Portable Devices, apply a the Device Exception for the VIPs may be the way to do so.

However, when configuring the exceptions, after select the Type and Vendor, it could not locate the right product ID/code from the pull-down menu.

Is it possible 

1) Add the Product ID/Code manually?

2) Except the devices by the full Device ID?

Please find the screen cap for further explanation.

Any one has the same issue?

Million thanks,

Sean

 

---

Hi @SeanDeHarris ,

As for question one, you must submit your product code as hex. Simply present the value in the hex format like so: 0x000. Here's an example as well:

 

As for creating an exception for a device by ID, that is not available at this time. To create an exception the following parameters used at this time:

• Type (Required)
• Vendor (Required)
• Product Code (Optional)
• Serial Number (Optional)

I hope this helps!