Problem with device controll rule

[d.barbe 0]

Hi,

I would like to block all modems except few ones:

I create this rule "r1" to allow modem named "TP-LINK; Incorporated"

<?xml version="1.0" encoding="utf-8"?>
<ESET>
 <RULE ID="0" NAME="Modem OK" LOGSEV="1074200576" ENABLED="1" EVENT="modem_access" ACTION="dc_rw" PARAMETER="dc_manufacturer=&apos;TP-LINK; Incorporated&apos; dc_model=&apos;TP-LINK HSUPA Modem&apos; dc_serial_number=&apos;863077011418476&apos; " />
</ESET>

TEST1:

-> But another modem is not blocked!

So I create another rule "r2" to block all modems and change priority

<?xml version="1.0" encoding="utf-8"?>
<ESET>
 <RULE ID="0" NAME="Modem" LOGSEV="1074200576" ENABLED="1" EVENT="modem_access" ACTION="dc_none" PARAMETER="dc_manufacturer=&apos;&apos; dc_model=&apos;&apos; dc_serial_number=&apos;&apos; " />
</ESET>

TEST2: "r1" is above "r2":

-> all modems are blocked.

TEST3: "r2" is above "r1":

-> all modems are blocked.

 

TEST 4: delete r2 and change r1 to block only "TP-LINK; Incorporated" (it's just just for testing conditions on Vendor, Model and Serial are good)

-> modem "TP-LINK; Incorporated" is blocked

-> another modems are allowed

 

How to block all modems except few ones?

Thanks for your help.

 

 

 

Edited September 28, 2018 by d.barbe
change title

[Pinni3 21]

You doing block all rule at bottom and You add exceptions at top of that block rule.

[d.barbe 0]

It's the TEST2 and all modems are blocked.

[Justin 0]

Please use only serial number with all device option and block the modem..default policy will be at the bottom

[d.barbe 0]

Using only serial number works.

Thanks