Technical Tip: exclude removable media access

[jkoay]

Description
This article describes how to exclude removable media access from its global action by defining a set of rules with action set to 'Allow'.

Solution
Configure rules to allow or block specific removable units is possible.
For a removable unit that does  not match any defined rule, FortiClient applies the <action> outside the <rules> element.

<removable_media_access>
<enabled>1</enabled>
<show_bubble_notifications>1</show_bubble_notifications>
<rules>
<rule uid=”<UID>”>
<description>Keyboard</description>
<type>simple</type>
<class>Mouse</class>
<manufacturer>Logitech</manufacturer>
<vid>3A93</vid>
<pid>000D</pid>
<rev>0001</rev>
<action>allow</action>
</rules>
<action>block</action>
</removable_media_access>

For the <class>, <manufacturer>, <vid>, <pid>, and <rev> elements, find these desired values of the unit in one of the following ways:
1) Microsoft Windows Device Manager- > Select 'device' and view its properties.
2) USBDeview (https://www.nirsoft.net/utils/usb_devices_view.html).