I think you have to add both
You can also use wild cards
refer this example
For instance on my machine, I have a USB device (Apple iPhone) which is recognised as:
\USB\Vid_05ac&Pid_1292\9f5bce6ec6831ba6c2520874ebca5f1ce17ac5c6
If I wanted to block that single device I could use the above string.
If I wanted to block all Apple iPhones, I could use the following:
\USB\Vid_05ac&Pid_1292\*
If I wanted to block all Apple USB devices, I could use this:
\USB\Vid_05ac*
If I wanted to block all Apple devices, I could try this:
\*\Vid_05ac*
In the above example,
Vid_05ac - Vendor ID 05ac - Apple
Pid_1292 - Product ID