EMS removable media access - Allow USB 3.0 Gigabit Ethernet Adapter (UGREEN 20256)

[NeoRant]

Good morning everyone,

It has been a while indeed. This is a follow up to a resolved post below: 

Post: Forticlient EMS removable media access
Date:14/5/2024

-----------------------------------------------------------------------------------------------

Since I configured this feature in EMS, it has been working perfectly, blocking usb devices while only allowing certain devices, especially Keyboard and mouse. However, my manager attached a USB dongle/device to a computer apart of target group/profile, and it is blocked by the USB policy. He instructed to disable the "Removable Media Access" feature on LAN until this ethernet-usb can be allowed on computers. I really don't want to keep this off for too long. Don't know why that instruction, but hey, following orders, at least my name won't be called for any issues.

Can you show me to allow this device in Endpoint Profiles -> Malware Protection -> "profilepcs" -> Removable Media Access?

Kindly see image below/attached showing my current configuration:

[AEK]

Hi NeoRant

Nice to see you again.

Open your device manager. When you plug the device it will add a new device in the device tree. Search inside that new device for its class name, then add this class to your EMS device manager as an allowed class. It should fix your issue.

[NeoRant]

Hi AEK,

It has been a while. Happy new year to you and the team.

Please see screenshot below. Let me know if I am at the correct place.

Add NET as the class name in a new row?

Neorant

[AEK · Accepted solution]

Yes I think it should be that one. Just write "Net" in the "Class" field and hope it will work.

[NeoRant]

Hi AEK,

Thanks for reply. Apparently "NET" is not a listed class item in Forticlient EMS. The only to add it is via custom which appears when you type class not listed/built-in. I really wonder if this will work lol. Is there any other work around

[AEK]

Hi NeoRant

You can write Net in the Class field.

I don't know if it works, you need to test it. Unluckily I don't have such lab to test it.

[NeoRant]

Hi AEK,

Will try and respond with the outcome.

NeoRant