Endpoint Protection

I have a windows XP machine, I applied the application and device policy to disable USB drivers. I have printers and scanners excluded.

This machine was working perfectly fine, no issues for at least 6 months with the same SEP policy.

I get a call stating the printer has an error, after troubleshooting it (reinstalling drivers, remove software...) and still did not work, I decide to change the USB cable.

When I replace the USB cable, the SEP policy blocks it.

Printer and workstation are the same, policy is the same.

I move the workstation to a different group without the app & device policy, and it works.

 

 

 

Nothing has changed on the sep side(I am the only one that has access to SEP).

 

Any ideas?

 

Thanks,

Joseph

So you mean the policy stopped in that the USB driver just started working again?

Wtihdraw the policy, make a copy of the adc policy and re-apply it to the group again.

use devviewer and try to find the DeviceId of the printer again. upgrading driver/software  might have changed something ( which does not happpen normally)

http://www.symantec.com/business/support/index?page=content&id=TECH106304

Check the device id again of that printer are same or it showing different..

You can add the device id of hp printer till rev. after that add the asteric(*) sign.

http://www.symantec.com/avcenter/security/ADC/Configuring_Application_Control_1.1.pdf

*Edit*

Eg - USBSTOR\DISK&VEN_SANDISK&PROD_CRUZER_MICRO&REV_2033\0002071406&0

Chooser till  - USBSTOR\DISK&VEN_SANDISK&PROD_CRUZER_MICRO* (add *)

https://www-secure.symantec.com/connect/forums/application-and-device-control-policy-issue-0

Hope it help

Have you find the usb port which are use by that printer is disable?

i am agree with rafeeq that may be this issue is due to driver upgradarion and may be changing by usb cable of the printer see the device id with devviewer and add  in exception as above process.

Is there any update?

The device I'd is still the same. The USB port is not disabled. The driver was never updated. All I did was swap out the USB cable. I have been working with Symantec anti virus for over 14 years and step since it came out and never saw this. It's just weird

My suggestion would be to get in touch with support

In that case yu can contact with tech support for close the issue

How to create a new case in MySupport

http://www.symantec.com/business/support/index?page=content&id=TECH58873

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:

• United States: https://support.broadcom.com (407-357-7600 from outside the United States)
• Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
• United Kingdom: +44 (0) 870 606 6000

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp