How to Block Mobile Phones (iPhone/Android) via USB Using Device Control

[HaddadSteve]

Hi everyone,

I'm currently working on a Device Control policy in Cortex XDR and I need to block mobile phones (iPhones, Android devices, etc.) when they are connected via USB — similar to how USB drives and external disks can be blocked.

I understand that Cortex XDR uses ClassGuid to identify device types (https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-4.x-Documentation/Device-control and https://learn.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-class... )

My goal is to block phones used for file transfer.

Questions:

1. Is there a recommended way to block mobile phones specifically, without impacting other USB peripherals?
2. Are there ClassGuids or USB class codes I should be aware of for iPhones and Android devices?
3. Has anyone successfully implemented this kind of policy and could share best practices?

I am kind of surprise to not find this feature by default.

Thanks in advance for your help!

Best regards