That's correct. As far as the PID and VID for apple is concerned, it's going to be very specific. The VID is always going to be the same (Apple) and the PID will only be a handful of items (each iPhone/iPad/iEtc device has its own). For Android devices, the VID will be any Vendor that makes the phone (Samsung, HTC, LG just to name a few) and each will have different PIDs for the devices they put out. Some even having different PIDs for different carriers.
Perhaps you should create a more general rule for blocking devices and just exclude your approved devices instead?
Tony is correct. You will need to declare the items as you find necessary. The above list helps you with Apple devices.
Here is a free utility that will help you determine the VID or PID http://www.nirsoft.net/utils/usb_devices_view.html
HOpe that helps.