
Rules may contain filters based on the 11 parameters listed previously. These parameters are repeated
below along with the name of the filter element.
1. Device Class—bDeviceClass
2. Device Subclass—bDeviceSubclass
3. Device Protocol—bDeviceProtocol
4. Vendor ID—idVendor
5. Product ID—idProduct
6. Device BCD—bcdDevice
7. Manufacturer—manufacturer
8. Product Type—product
9. Serial Number—serialNumber
IMPORTANT: Filtering on device strings (manufacturer, product, and serial number) may not be
reliable. Device vendors are not required to add data to these fields, and many do not. Before deploying
a solution that depends on a string-based filter, ensure that the devices you wish to use implement the
appropriate device strings.
10. IP address of the local computer—peerAddress
11. The domain group of the local user—group
The following ACL file allows only USB devices with a Device Class (bDeviceClass) of 7 to be remotely
attached while denying everything else:
<hprUsbAcl> <ruleset> <rule type="allow"> <name>Allow printing devices</
name> <filter bDeviceClass="07"/> </rule> </ruleset> </hprUsbAcl>
The following ACL file denies USB devices for a specific range of local computer IP addresses while allowing
all other local computers to use Remote USB:
<hprUsbAcl> <ruleset> <rule type="allow"> <name>Allow all devices</name>
</rule> <rule type="deny"> <name>Deny 192.168.9.0 subnet</name> <filter
peerAddress="192.168.9.0/20"/> </rule> </ruleset> </hprUsbAcl>
The following ACL file allows USB connections for members of the DEFAULT-DOMAIN\administrators group
while denying all other USB connections:
<hprUsbAcl> <ruleset> <rule type="allow"> <name>Allow members of DEFAULT-
DOMAIN\administrators</name> <filter group="DEFAULT-DOMAIN
\administrators"/> </rule> </ruleset> </hprUsbAcl>
Determining USB device information
This section describes how to obtain several of the most-used USB device parameters.
Determining USB device information for Windows
To obtain the Vendor ID and the Product ID for a USB device on Windows, perform the following steps:
1. Open the device manager.
Remote USB 59
Komentarze do niniejszej Instrukcji