Endpoint Protection

 View Only
Expand all | Collapse all

Block Pen Drive/USB flash drive through SEP 11

Migration User

Migration UserAug 31, 2009 04:10 AM

  • 1.  Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 30, 2009 03:19 AM
    is there any way to block pen drive/ USB flash drive through SEP 11. but USB mosue and USB keyboard should be working.

    thanks in advance.


  • 2.  RE: Block Pen Drive/USB flash drive through SEP 11
    Best Answer

    Posted Aug 30, 2009 04:00 AM

    Title: 'How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.'

     http://service1.symantec.com/support/ent-security.nsf/docid/2008102008020548?Open&seg=ent

    Title: 'How to block USB flash drives while allowing other USB devices.'

     http://service1.symantec.com/support/ent-security.nsf/docid/2008022822274348?Open&seg=ent


  • 3.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 30, 2009 05:58 AM
    Prachands link will surely help you .I used  those documents  to block usb devices.


  • 4.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 30, 2009 11:57 PM
    thank you very much. its working.

    one more question. if i want to give access to those bolcked device to a specific user is this possible???


  • 5.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 12:22 AM
    Then you have to install the SEP client in user mode and  configure the policy  accordingly.
    Lets take an Example ,
    You have an AD sync.
    There are 2 user , User 1 and Admin one member of user group and the other of Admin In AD.
     And the Client is installed in the user mode.
    On the same machine when user 1 logs in it will take the policy from the Group user( Block USB)
    And if the admin logs in it will take the policy from the admin group to allow usb
    You need to decide and configure the policy accordingly to each group.
     
    Also AD sync and Client in User mode will be a great help


  • 6.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 02:57 AM
    I've no idea about AD sync. could u plz tell me every steps on this matter...

    Tnx


  • 7.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 03:19 AM

    'Organizational Units from Active Directory in Symantec Endpoint Protection 11.0'
     http://service1.symantec.com/support/ent-security.nsf/docid/2007092721431648?Open&seg=ent


  • 8.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 04:10 AM
    Yes Prachand will surely help u


  • 9.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 12:19 PM
    Dear Prachand thank you very much. you really such a helpful person. your every topic is really helpful. everything working fine but some users report me that they cant print with their printer which are attached to their computer via USB cable. i've no idea why this is happen coz i've excluded printer and digital camera, plz help.

    thank you.


  • 10.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 12:29 PM

    In some senarios Printers get  detected as the same GUID as USB drives in  application and device control. Please tell me which version of SEP you are using    See if this helps

    Title: 'Network Printer does not receive print jobs after installing the Symantec Endpoint Protection (SEP) client'
     http://service1.symantec.com/support/ent-security.nsf/docid/2008040115074048?Open&seg=ent



     



  • 11.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 12:47 PM
    SEP Build 11.0.1000.1112
    CMC/SNAC Build 11.0.1000.1091
    SESM Build 11.0.1000.1049


  • 12.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Aug 31, 2009 01:14 PM
    This issue has been resolved in MR2, and you have MR1

    Please upgarde to MR4 using

    Migrating to Symantec Endpoint Protection 11.0 MR4
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008121712452848

    Download  Symantec Endpoint Protection 11.0.4000 MR4 Maintenance Release


  • 13.  RE: Block Pen Drive/USB flash drive through SEP 11

    Posted Nov 24, 2009 04:31 AM
     Hey Prachand thank you very very much!!! And thanks to dream_chaser too for posting the question... Saved my a*s :D