Is it possible with the Elements Endpoint Protection Device Control to allow specific type of network adapters?

Issue:

Is it possible with Elements Endpoint Protection Device Control feature to block all network adapters, but allow a specific type, group or class of network adapter, such as virtual network adapters or specific vendor's network adapters?

Resolution:

Device Control can block devices based on their Hardware ID, Compatible ID or Class GUID (https://community.withsecure.com/en/kb/articles/5525-how-device-control-block-devices)

To allow or block all network adapters, a Class GUID rule for network adapters is required.: 

1. Log in to Elements Security Center Portal 
2. Go to the Environment > Profiles page
3. Select the profile which is in use on the devices
4. Go to Device control settings
5. Enable device control 
6. In Device access rules, click Add rule 
7. Add {4d36e972-e325-11ce-bfc1-08002be10318} in the Hardware ID field 
8. In Access to device, select either Block or Allow depending on your use case
9. Click Save profile

In this case the {4d36e972-e325-11ce-bfc1-08002be10318} is the Class GUID for all network adapters: https://docs.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors?redirectedfrom=MSDN

If you want to allow only a specific vendor's network adapters, you can allow the network adapter's Compatible ID. The Compatible ID rule is created by following the same steps as for the Class GUID, except the Compatible ID is added to the Hardware ID field.

If the device is not blocked, the Hardware ID, Compatible ID and Class GUID can be viewed from the Elements Endpoint Protection Portal from the device's Connected devices list :

1. Log in to Elements Security Center Portal
2. Go to the Environment > Devices page
3. Select device 
4. Go to the Connected devices tab
5. Click on the arrow on the left to view ID details

The Compatible ID can also be acquired locally from the device by following these steps:

1. Open Device Manager
2. Right-click device > Properties
3. Go to Details tab
4. Select property as Compatible ID

If Compatible ID property is not selectable, then the device has none.