Endpoint Protection

 View Only

  • 1.  SEP 12 log sd card or CD/DVD besides normal USB written

    Posted Aug 24, 2012 10:32 AM

    Hi all,

     

    I am testing the SEP 12.1 recently. Try to find out usb written logs and SD card copying logs/ DVD rom copyingl logs... did anybody know if it is only available for normal usb written logs? Thanks!



  • 2.  RE: SEP 12 log sd card or CD/DVD besides normal USB written

    Posted Aug 24, 2012 10:42 AM

    how to use symantec endpoint protection (SEP) to monitor the USB device activite

    http://www.symantec.com/business/support/index?page=content&id=TECH155578

     

    https://www-secure.symantec.com/connect/forums/log-files-written-usb-drives



  • 3.  RE: SEP 12 log sd card or CD/DVD besides normal USB written

    Broadcom Employee
    Posted Aug 24, 2012 11:09 AM

    Hi,

    Your Application and Device Control (ADC) policy to prevent writing to CDs does not work as expected. You have verified that a similar policy prevents writing to USB drives. Although attempts to read the CD are logged and allowed, attempts to write are not logged and not blocked.

    Check following article for more details:

    After setting up an Application and Device Control policy to block CD writing, CD writing is not blocked as expected, and write attempt is not logged

    http://www.symantec.com/docs/TECH104800