Menu path: Sessions > RDP > RDP Global > Fabulatech USB Redirection

Redirection for USB devices can be allowed or denied during an RDP session on the basis of rules. Sub-rules for specific devices or device classes are also possible. The use of rules is described under USB Access Control.

For the Fabulatech USB redirection, a server-side component is required. We recommend the USB for Remote Desktop IGEL Edition; see http://www.usb-over-network.com/partners/igel/.

Fabulatech USB Redirection

☑  Fabulatech USB redirection is enabled for all RDP sessions.

☐  Fabulatech USB redirection is disabled. (Default)

Enable either Native or Fabulatech USB Redirection – not both together. Disable USB redirection if you use DriveLock.

Ensure that no other Hotplug storage device (USB stick) is connected if a session is started with Fabulatech USB redirection. Otherwise, the Hotplug storage device will not be securely removed when the session starts, and this could lead to data loss. With IGEL Linux Version 10.02.x the Hotplug storage device is already insecurely removed when the Fabulatech USB redirection is enabled.

Default rule: This rule will apply if no special rule was configured for a class or a device.

  • Deny
  • Allow

    Tip

    To secure your endpoint, it is generally recommended to set Default rule to Deny and to configure Allow rules only for the required USB devices and USB device classes. 

Class Rules

Class rules apply to USB device classes and sub-classes.

To manage rules, proceed as follows:

Click to create a new entry.

Click to remove the selected entry.

Click to edit the selected entry.

Click to copy the selected entry.

Class rule properties:

Rule:

  • Allow: Devices that have the properties defined here are redirected by the Fabulatech USB redirection.
  • Deny: Devices that have the properties defined here are not redirected.

Class ID: Device class

Subclass ID: Subclass relating to the specified device class

Name: Free text entry

Override serial: Serial number that will appear in the session

Override name: Device name that will appear in the session

Postpone

☑  The USB device is only removed from the system (endpoint device) when the session starts.

☐  The USB device is no longer shown immediately after the system is booted. (Default)

This setting is only effective if the Takeaway parameter is enabled.

Takeaway

☑  The USB device may be removed from the system (endpoint device).

☐  The USB device may not be removed. (Default)

No Reset

☑  The device will not be automatically reset after the connection with the session has been terminated.

☐  The device will be reset after the connection with the session has been terminated. (Default)

Device Rules

A device rule applies to a specific device that is identified by its serial number.

Device rule settings:

Rule:

  • Allow
  • Deny

Vendor ID: Hexadecimal manufacturer number

Product ID: Hexadecimal device number

Getting USB Device Information

To find out the Class ID, Subclass ID, Vendor ID and Product ID of the connected USB device, you can use the System Information tool. For further information, see Using “System Information” Function.

System Information example:

Alternatively, you can use the command lsusb (or lsusb | grep -i [search term]) in the terminal.

Example for lsusb:

Name: Free text entry

Override serial: Serial number that will appear in the session

Override name: Device name that will appear in the session

Postpone

☑  The USB device is only removed from the system (endpoint device) when the session starts. (Default)

☐  The USB device is no longer shown immediately after the system is booted.

This setting is only effective if the Takeaway parameter is enabled.

Takeaway

☑  The USB device may be removed from the system (endpoint device). (Default)

☐  The USB device may not be removed.

No Reset

☑  The device will not be automatically reset after the connection with the session has been terminated. (Default)

☐  The device will be reset after the connection with the session has been terminated.