Menu path: Sessions > Citrix > Citrix Global > Native USB Redirection

USB devices can be permitted or prohibited during a Citrix session on the basis of rules. Sub-rules for specific devices or device classes are also possible. The use of rules is described under USB Access Control.

Native USB redirection

☑ Native USB redirection is enabled globally.

Enable either native USB redirection or Fabulatech USB redirection, but not both together.
Disable USB redirection if you use DriveLock. Further information can be found under Using DriveLock with IGEL Devices.

Default rule: This rule will apply if no special rule was configured for a class or a device.

  • Deny
  • Allow


    To secure your endpoint, it is generally recommended to set Default rule to Deny and to configure Allow rules only for the required USB devices and USB device classes. 

Class Rules

Class rules apply to USB device classes and sub-classes.

To manage rules, proceed as follows:

Click to create a new entry.

Click to remove the selected entry.

Click to edit the selected entry.

Click to copy the selected entry.

Add class rule:


  • Allow
  • Deny

Class ID: Selection list

Sub-class ID: Selection list

Name: Free text entry

Device Rules

Device rules apply to specific USB devices.

Add device rule:


  • Allow
  • Deny

Vendor ID: Hexadecimal manufacturer number

Product ID: Hexadecimal device number

Getting USB Device Information

To find out the Class IDSubclass IDVendor ID and Product ID of the connected USB device, you can use the System Information tool. For further information, see Using “System Information” Function.

System Information example:

Alternatively, you can use the command lsusb (or lsusb | grep -i [search term]) in the terminal.

Example for lsusb:

Name: Free text entry