Endpoint Protection

Hi,

   I have run the USB restriction policy in one of my Branch. While update the policy IPhone charing has been disabled. We nee to restart the same...

Is anyone know how to startup same..

Possibly you should block the specific usb only

http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/b54beb2f46268ccc882574e80052960f?OpenDocument

you can pull up the hash value and then block them from app device and allow IPHONE from the same policy

you can get this dev viewer tool from machine on which sep is installed .

from program files \symantec\ run this tool look for hash value and allow it from device policy

I have tried the same but still charging is not working

from device manager did you get the device ID, is it possible for you to exclude that?

If you block Apple Device ID, you will block Apple USB connection device access and at the same time you will block iPhone charging if you use Windows XP, this is Windows XP issue, not SEP device control, if you apply same policy on a Windows 7 machine, same policy, but iPhone charge will work.

I have tried that in excluding but in this case mobile usb-storage also get started..

My client sysmtens are almost window vista nad win-7. Issue is in the same

Can you share with us how your device control policy was configured? especially on Apple USB device?

Hi,

    Pls find the attach jpeg of Policy..!!

Can you remove the device idetifier for iPhone from your blocked list and add the Device ID -- USB\VID_05AC*

check to see this make any difference for you. 

I have not add any IPhone identifier in Blockage. Only USB device add in blockage...

Can I try the same on test group..

Blockage the USB device with the exception of Device ID -- USB\VID_05AC*

Hello,

Let me explain, what happens..(If I am not mistaken)..

When an USB IPhone Connector is connected to USB port of Computer,  IPhone installs the Drivers of the same (or ITune Software identifies the Iphone). Until and unless the Drivers can installed or detection takes place the Phone would not be charged. IPhone also carries the HDD within it. So, when you insert the Connector, it detects the HDD as well. (you can see the Iphone HDD in the My Computer option)

In your case, all you want is the IPhone has to get charged via your USB and no transfer between the PHONE and computer should take place, correct??

However, you need to understand, it would not get charged until the IPhone is detected. And for detection your HDD has to be activated and drivers be installed and a Transfer has to take place (which you do not want.)

Correct??

Hi my problem when I have implemented the proper USb(exception - human interface) Bloackge policy to my Client Group.It has been disabled all the USB storage as well as Apple Iphone Charger point.. So the senior person told that if the chargin of the apple phone has worked in the past then why not in present..

So I have raised this thread.

Right now I have cleared them about the same and update them it will be disable due to some changing in the policy..

I aggree with the point. thanks a lot.

Hello,

Check this Articles:

Smart phones and Application and Device Control in Symantec Endpoint Protection 11.0

http://www.symantec.com/docs/TECH147791

Similar Threads:

https://www-secure.symantec.com/connect/forums/block-iphone-not-its-charge

https://www-secure.symantec.com/connect/forums/sep-device-control-blocking-blackberryiphoneetc-enable-charge

https://www-secure.symantec.com/connect/forums/iphone-charging

Hope that helps!!