Video Screencast Help

How to Block 3G modems in Application and Device Policy

Created: 04 Feb 2010 • Updated: 01 Nov 2010 | 10 comments
Language Translations
Fatih Teke's picture
+11 11 Votes
Login to vote

Hi everybody,
The technology of the future.10 years ago,  we just connect to the Internet via 56k modems, but now we can connect to internet everywhere.  All it takes is a little USB Modem.

But what about our security?

Since it's become apparent over the last few months and years that clients can download harmful virus/applications (you name it), what can we do to block USB modems?

In this article I  will demonstrate how to block USB modems from  connecting to the internet.
Click the "Policies" Tab, then click "Application and Device Policy", Rigth Click your group, which you want to edit and choose "Edit"

1.PNG

In the "Application and device control" menu choice "Device Control" and click "Add" button under "Bloked Devices"

2.PNG

If you want,  you can log block devices and give the special messages to users when devices are blocked.

In the "Device Selection" windows you can see all devices came from built-in and your personel devices. Choose "Modems" and click "OK" button.
3.PNG

Then you can see your bloked modems under the "Blocked Devices" window in "Device Control." Click Ok button and close the window.

4.PNG

Now you can assess the policy for your group, which you want to block. Now the USB modems and All other modems will not work thanks to this policy.

Regards.
FAtih

Comments 10 CommentsJump to latest comment

Hear4U's picture

We received quite a few requests for content regarding this topic.  Let us know what you think!

As always, if there's a particular topic or subject material you'd like to see covered, let me know and we'll get it created for you!

Best,

Eric

check out the community at www.infoblox.com/community

+1
Login to vote
Vikram Kumar-SAV to SEP's picture

Good work Fatih.. 

Vikram Kumar

Symantec Consultant

The most helpful part of entire Symantec connect is the Search button..do use it.

0
Login to vote
Frank Law's picture

 Great Job!

May all your issue be resolved... Symantec Enterprise Support.

0
Login to vote
Fatih Teke's picture

Thank you !! :)
It glad to heard :) When I create an article, I asked to myself will it help people or not? I thing so i choice good article ;)

Regards.
Fatih.

 Everything works better when everything works together.

0
Login to vote
AravindKM's picture

Nice Article 

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

0
Login to vote
way_ne's picture

Always wondered if there where other  ways to stop the careless uploading of viruses through unauthorized modems. Thanks for the hint!

0
Login to vote
mon_raralio's picture

Hi,

If the aforementioned did not work, try this out:
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/b54beb2f46268ccc882574e80052960f?OpenDocument

It contains procedures for adding new devices using DevViewer.exe. I ran it and found the USB modem. Here's the screenshot of the tool in use. Copy the device ID in the SEPM console.
Policies > View Policies > Policy Components > Hardware Devices
Tasks > Hardware Devices > Add hardware device

“Your most unhappy customers are your greatest source of learning.”

+1
Login to vote
Fatih Teke's picture

Thank you :)
I am glad for people like it :)

Best Regards.
Fatih

 Everything works better when everything works together.

-1
Login to vote
jackst's picture

That's a very interesting way of blocking USB modems from connecting to the internet. Honestly, I had no idea how to block USB modems (I didn't even think about doing it at all), so I just realize how much I am not familiar with all the security issues and I should definitely search for more information and educate myself. Anyawy, thanks for this hint.

+1
Login to vote
samwilkent's picture

that was some pretty nice tutorial Faith but USB modems nowadays comes with an application (i supposed you wrote this when USB modems are that complicated to use) that will never connect to the internet without running such application. I have mine with a cable extension to pick up better signal from my network providers.

thanks for this tutorial though.

0
Login to vote