USB devices can be permitted or prohibited during a Citrix session on the basis of rules. Sub-rules for specific devices or device classes are also possible. The use of rules is described under USB Access Control. See also How to Configure Citrix Native USB Redirection. 

An overview and best-practice recommendations for the use of webcams can be found under Webcam Redirection and Optimization in IGEL OS.

Menu path: Sessions > Citrix > Citrix Global > Native USB Redirection


Native USB redirection

☑ Native USB redirection is enabled globally.

☐  Native USB redirection is disabled. (Default) 

Enable either native USB redirection or Fabulatech USB redirection, but not both together.
Disable USB redirection if you use DriveLock. Further information can be found under Using DriveLock with IGEL Devices.

Default rule

This rule will apply if no special rule was configured for a class or a device.

  • Deny (Default)
  • Allow

    Tip

    To secure your endpoint, it is generally recommended to set Default rule to Deny and to configure Allow rules only for the required USB devices and USB device classes. 

Class Rules

Class rules apply to USB device classes and sub-classes.

To manage rules, proceed as follows:

Click to create a new entry.

Click to remove the selected entry.

Click to edit the selected entry.

Click to copy the selected entry.

Add class rule:

Rule:

Class ID: Selection list

Sub-class ID: Selection list

Name: Free text entry

Device Rules

Device rules apply to specific USB devices.

Add device rule:

Rule:

  • Deny: No automatic redirect of a device
  • Allow: Automatic redirect of a device only after a session starts

  • Connect: Automatic redirect of a device when a session starts

    In the case of Connect or Allow, the device is automatically redirected when it is unplugged and plugged in during a session, see https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/configure-xenapp.html#usb.

    If you have problems with device redirection after the update to Citrix Workspace App 22.07 or higher, try to change the rule to Connect.

    Composite USB Redirection

    In IGEL OS 11.08.200 and higher, you can configure composite USB redirection which is needed for multifunctional devices that use different interfaces. Examples of such composite USB devices are dictation microphones or Bloomberg keyboards which comprise a keyboard, fingerprint reader, an audio device, USB hub, etc. 

    To redirect the entire composite device to the session, only Vendor ID (vid) and Product ID (pid) must be added. 

    If you need to split the composite device and redirect only the child interfaces that use a generic USB channel, you must also add filter parameters split and intf under Extra Config. For more information on composite USB redirection and sample device rules, see https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/configure-xenapp.html#usb. 

Vendor ID: Hexadecimal manufacturer number

Product ID: Hexadecimal device number

Getting USB Device Information

To find out the Class ID, Subclass ID, Vendor ID and Product ID of the connected USB device, you can use the System Information tool. For further information, see Using “System Information” Function.

System Information example:

Alternatively, you can use the command lsusb (or lsusb | grep -i [search term]) in the terminal.

Example for lsusb:


Extra Config: Allows to add split and intf parameters to split the composite USB device.
Example:
CONNECT: vid=047F pid=C039 split=1 intf=03 # Allow HID device and connect automatically.

Name: Free text entry