Endpoint Protection

Hi;

I have  recently  used Application and device policy on Sep clients.One of the end user wants to charging his iphone on usb.I block usb devices on devices section and allow specific devices on there.What happens when Iphone connected to usb?Is it a human interface device?

Another point when I searched in security forum people do this with using application policy with selected media read only.What happened if I combine application and device policy at the same time.

I assume that it is not recomended.

I need your helps thanks.

Using Devviewer.exe from link below to identify the ID and the allow it to execption Only for this unique ID

http://service1.symantec.com/SUPPORT/ent-security.nsf/ppfdocs/2007511906325898?Open&dtype=corp&src=&seg=&om=1&om_out=prod

Try creating a test policy first , take his IPhone charger and test it applying Test policy on Test machine . If it work implement the same only to this specific user .

I know this method but I think if I allow device id it also allow iphone such as harddisk process.isnt it?

Yes it will

Charging through USB only ???

Let me try and test it for you again if i find something will post in few minutes .

I don't think that is going to work.

When an USB IPhone Connector is connected to USB port of Computer, IPhone installs the Drivers of the same (or ITune Software identifies the Iphone). Until and unless the Drivers can installed or detection takes place the Phone would not be charged. IPhone also carries the HDD within it. So, when you insert the Connector, it detects the HDD as well. (you can see the Iphone HDD in the My Computer option)

However, you need to understand, it would not get charged until the IPhone is detected. And for detection your HDD has to be activated and drivers be installed and a Transfer has to take place (which you do not want.)

Hope this helps

https://www-secure.symantec.com/connect/forums/block-iphone-not-its-charge

https://www-secure.symantec.com/connect/forums/charging-has-blocked

Hi natralli,

Two of my colleagues who have years of SEP experience between them recently tried to do exactly what you are describing, but without success.  I don't believe that there is any way to use ADC to block everything on the phone except the ability to charge.

No it will not work. I have tested it.