This article provides a recommendation about how to block USB ethernet devices through Citrix sessions so users connecting one of these devices to their client machine won’t get the device mapped through the Citrix session.

---

Instructions

•    USB ethernet devices are be known as 'CDC class' and ‘USB CDC’ devices are set as Class= 02h
•    Access Studio and get into the Policies area
•    Edit the unfiltered policy or create a new one
•    Search for the policy ‘Client USB device redirection rules’ and edit it
•    Set Class=02h to ‘Denied’
•    Save the policy and have the user logging off and logging back into Workspace app or StoreFront web.
 

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

https://en.wikipedia.org/wiki/Ethernet_over_USB
https://en.wikipedia.org/wiki/USB_communications_device_class
https://www.usb.org/defined-class-codes