Blocklist

Use the Blocklisted DevicesMachines connected to a network that have been discovered by GFI OneGuard. to specify peripherals that are always blocked. The blocklist allows the administrator to have policies that allow the use of various categories and ports, while ensuring that the devices listed are always blocked.

You can use either the global blocklist or a custom blocklist to block devices:

Type	Description
Global Blocklist	Can be set at service level and can affect all groups or devices when selected. To create a global blocklist go to Manage > Services > EndPoint ControlService used by GFI OneGuard to control access to devices..
Custom Blocklist	Can be set at group or device level and affects only the group of devices where it is created. To create a custom blocklist go to Manage > Devices > EndPoint Control.

The procedure to add a device to a blocklist is the same for both the global and custom blocklist and consists of two steps:

Step 1: Obtain the Hardware ID

GFI OneGuard relies on the information stored in the Device Manager of the computer to which a device is plugged-in to obtain the hardware information and applies policies accordingly.

To obtain the hardware IDCode created by the Operating System to identify attached devices.:

1. Open the Panel Control on the machine that the device is plugged.
2. Go to Hardware and Sound > Device and Printers > Device Manager.
3. Expand the category, right-click the device and select Properties.
4. Open the Details tab.

Device Manager showing hardware Ids

5. Under property select Hardware Ids.
6. Copy the items displayed in the Value textbox. By default more that one item is listed. The longer value on top is the one with more details and should be used.

Step 2: Add Hardware ID to exceptions on the Blocklist

1. Login to the GFI OneGuard PlatformThe main component of GFI OneGuard that connects all the services offered by the product and the database that stores all collected information..
2. Go to Manage > Devices.
3. Select the entire Network or a specific group.
4. Go to Services > EndPoint Control.
5. Under Blocklisted Devices select the type of blocklist:

Type	Description
Global Blocklist	Set at platform level and applicable to all groups.
Custom Blocklist	Set at group level and applicable to all devices that have the specific policy applied.

6. Click Add Device Exception.

Options available to add an device to exception list

7. Enter the following information:

Field	Description
Hardware ID	Paste the Hardware ID copied in the previous step. Vendor ID and Product ID are automatically populated.
Device Description	Enter a description of the devices included in the list.
Device Category	Select a category from the drop-down list.

8. Click Add Device Exception.