USB same NAME, PID, VID, REV
1. Under the policies specified serial number of USB instead of brand and vendor, because there can be 100 USB from same vendor that have same name, pid, vid, rev, and if i give acces to one then all 99 will have access;
2. Generate logs from whitelist;
3. Collecting logs by serial number of USB instead brand and vendor, because if i have 100 USB with same name, pid, vid i don't know wich USB is used when accesing the resources of LAN;
Luciana Jacubovich commented
[Comment date: 6/5/12 7:20]
It's Ture! I need to give permission to a specific device and i can't specify the serial number of it. So i'm giving permission to a lot of devices. It should be an opcion (like in devices whitelist) to enable all serial or a specific serial number.
[Comment date: 3/9/13 2:28]
100% agree with point 1, the other two are also very important.