Endpoint Protection

good evening,

i created an Application and Device Control Policy, Named it, and marked "Enable this Policy" checkmark. in Application Control tab, i marked "Log files written to USB drives",

after this i pres edit on selected rule set and marked Enable logging, Severity: Minor--10 and OK.

then i assigned this policy to group that i want to log files written to USB Device.

after this steps is someone tries to copy some files to USB drive, i can see this activities in  Monitors -> Logs

Log Type: Application and Device Control
Log Content: Device Control




unfortunately there is not occuring any records about users acitivities....


am i doing something wrong?

"someone tries to copy some files to USB drive, i can see this activities in  Monitors -> Logs"

"unfortunately there is not occuring any records about users acitivities...."

What User Activities are you asking about.

i m asking about,

for example if someone has an access on USB, and if someone will copy files on USB, that i could see the logs, which files did she/he copy from her/his computer.

no more ideas?

Try to use the policy in this link

http://service1.symantec.com/support/ent-security.nsf/docid/2010032211275048

 

Change Severity:  to major some higher value and try...

thank you kavin for response,
i ll check it and let you know...