HP Xw460c - ProLiant - Blade Workstation User Manual page 112

Rules may contain filters based on the 11 parameters listed previously. These parameters are repeated below
along with the name of the filter element.
1. Device Class—bDeviceClass
2. Device Subclass—bDeviceSubclass
3. Device Protocol—bDeviceProtocol
4. Vendor ID—idVendor
5. Product ID—idProduct
6. Device BCD—bcdDevice
7. Manufacturer—manufacturer
8. Product Type—product
9. Serial Number—serialNumber
CAUTION: Filtering on device strings (manufacturer, product, and serial number) may not be reliable.
Device vendors are not required to add data to these fields, and many do not. Before deploying a
solution that depends on a string-based filter, ensure that the devices you wish to use implement the
appropriate device strings.
IP address of the Local Computer—peerAddress
•
The domain group of the local user—group
•
The following ACL file allows only USB devices with a Device Class (bDeviceClass) of 7 to be remotely
attached while denying everything else:
<hprUsbAcl>
<ruleset>
<rule type="allow">
<name>Allow printing devices</name>
<filter bDeviceClass="07"/>
</rule>
</ruleset>
</hprUsbAcl>
The following ACL file denies USB devices for a specific range of Local Computer IP addresses while allowing all
other Local Computers to use remote USB:
<hprUsbAcl>
<ruleset>
<rule type="allow">
<name>Allow all devices</name>
</rule>
<rule type="deny">
<name>Deny 192.168.9.0 subnet</name>
<filter peerAddress="192.168.9.0/20"/>
</rule>
</ruleset>
</hprUsbAcl>
The following ACL file allows USB connections for members of the DEFAULT-DOMAIN\administrators group while
denying all other USB connections:
<hprUsbAcl>
<ruleset>
<rule type="allow">
<name>Allow members of DEFAULT-DOMAIN\administrators</name>
<filter group="DEFAULT-DOMAIN\administrators"/>
</rule>
</ruleset>
</hprUsbAcl>
Advanced capabilities 112