NOTE: The USB Attached SCSI (UAS) Mass Storage Device class is defined as the SCSI Adapter class in DLP Endpoint.

By default, the USB Attached SCSI (UAS) Mass Storage Device class is set as an unmanaged device class. To block this class of devices, the USB Attached SCSI (UAS) Mass Storage Device class must be managed. To make the UAS Mass Storage Device class a managed device class in DLP Endpoint, see the attached article.

The USB Attached SCSI (UAS) Mass Storage Device class is set as in unmanaged device class by default. For DLP to block a UAS device, the device class should be managed.

Perform the following steps to set up the rule: 

1. Open DLP Policy Manager, Policy Assignment and click Edit.
2. Under Policy Settings click Device Classes.
3. Under Device Class Name, select USB Attached SCSI (UAS) Mass Storage Device.
4. Under Status, select Managed.
5. Under Filter Type, select Upper/lower filter.
6. Navigate to New Rule, Device Control, Plug and Play Device.
7. Click the 3 dots (...).
8. New Item, Name it (UAS).
9. Add filter "Device Compatible ID (Advanced)".
10. Select "Contains" and Add "USB\Class_08&SubClass_06&Prot_62" or "USB\COMPAT_VID_0BC2&Class_08&SubClass_06&Prot_62".
    
    NOTE: You must add both the parameters mentioned above, as Windows 11 identifies the device UAS devices differently compared to Windows 10. The device compatible ID appears differently on Windows 10 and 11 and hence, both need to be added to the plug-and-play device rule. For example: 
    
    USB\COMPAT_VID_0BC2&Class_08&SubClass_06&Prot_62 (Windows 11)
    
    NOTE: The VID varies for different vendors.
    
    USB\Class_08&SubClass_06&Prot_62 (Windows 10)
    
    
11. Click Save.
12. On the Reaction tab, set a Block action and Save the rule.