Using Symantec Endpoint Protection (SEP), you find that USB printers remain blocked when returning from an external location that blocks Printing Devices by Class ID –without any devices excluded from blocking– to an internal one with USB devices blocked by Class ID and USB Printing Support devices excluded from blocking by Device ID.
Incorrect logic for USB Printing Support devices resulted in those devices staying disabled in the situation described above.
This issue has been resolved in SEP 14.3, due in Q4 2019. Please subscribe to Download the latest version of Endpoint Protection to be notified when it will be available for download.