HP Remote Graphics Software 5.4.0 User Guide

Rules may contain filters based on the 11 parameters listed previously. These parameters are repeated
below along with the name of the filter element.
1.
Device Class— bDeviceClass
2.
Device Subclass— bDeviceSubclass
3.
Device Protocol— bDeviceProtocol
4.
Vendor ID— idVendor
5.
Product ID— idProduct
6.
Device BCD— bcdDevice
7.
Manufacturer— manufacturer
8.
Product Type— product
9.
Serial Number— serialNumber
CAUTION: Filtering on device strings (manufacturer, product, and serial number) may not be
reliable. Device vendors are not required to add data to these fields, and many do not. Before
deploying a solution that depends on a string-based filter, ensure that the devices you wish to use
implement the appropriate device strings.
10.
IP address of the Local Computer—peerAddress
11.
The domain group of the local user—group
The following ACL file allows only USB devices with a Device Class (bDeviceClass) of 7 to be remotely
attached while denying everything else:
<hprUsbAcl> <ruleset> <rule type="allow"> <name>Allow printing devices</name> <filter
bDeviceClass="07"/> </rule> </ruleset> </hprUsbAcl>
The following ACL file denies USB devices for a specific range of Local Computer IP addresses while
allowing all other Local Computers to use remote USB:
<hprUsbAcl> <ruleset> <rule type="allow"> <name>Allow all devices</name> </rule> <rule type="deny">
<name>Deny 192.168.9.0 subnet</name> <filter peerAddress="192.168.9.0/20"/> </rule> </ruleset> </
hprUsbAcl>
The following ACL file allows USB connections for members of the DEFAULT-DOMAIN\administrators
group while denying all other USB connections:
<hprUsbAcl> <ruleset> <rule type="allow"> <name>Allow members of DEFAULT-DOMAIN
\administrators</name> <filter group="DEFAULT-DOMAIN\administrators"/> </rule> </ruleset> </
hprUsbAcl>
6.5.6 Determining USB device information
This section describes how to obtain several of the most-used USB device parameters.
ENWW
Remote USB operation
121