Block single peripheral, whilst allowing all by default
In Sophos Central, you can block all peripherals by default - and then have an allow list
You can't do it the opposite way round, where you allow all devices and just have a block list.
When trying to create a Peripheral Exemption to Block a device, with the default being Allow, it says that "Exemptions cannot be stricter than global settings."
This mean that for a particular customer, we have to Allow around 300 USB devices just to block a singular device which a user brought in with malicious content on.
It would be good to just block a singular device, whilst allowing all devices by default