Endpoint Protection

Hi  All,

I need to block usb pendrives and External HDD drives   but i need to exclude our company provided Internet USB Data Cards.
Please guide me how to do it in  detail.

With advanced thanks
Raj

This Kb can help you in this
How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

Title: 'How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.'
Document ID: 2008102008020548
> Web URL: http://service1.symantec.com/support/ent-security.nsf/docid/2008102008020548?Open&seg=ent

HI Prchand,

Iam able to block all usb pendrive and Ext HDD driver. But how to exclude Internet Data Cards.
which  device ID i need to add 
1. Either Modem
2.Qual comm MMC storage


With thanks
Raj

I think you have to add both
You can also use wild cards
refer this example
For instance on my machine, I have a USB device (Apple iPhone) which is recognised as:
 
 
 
\USB\Vid_05ac&Pid_1292\9f5bce6ec6831ba6c2520874ebca5f1ce17ac5c6
 
 
 
If I wanted to block that single device I could use the above string.
 
 
 
If I wanted to block all Apple iPhones, I could use the following:
 
 
 
\USB\Vid_05ac&Pid_1292\*
 
 
 
If I wanted to block all Apple USB devices, I could use this:
 
 
 
\USB\Vid_05ac*
 
 
 
If I wanted to block all Apple devices, I could try this:
 
 
 
\*\Vid_05ac*
 
 
 
In the above example,
 
 
 
Vid_05ac - Vendor ID 05ac - Apple
Pid_1292 - Product ID

Plug the device and go to the Device Manager  and now see where the card is listed.If it is listed on more than one place then you need to exclude both

Ok thanks

Let me try  and let youknow

Raj

Hello Sraj
This video will help you too.

https://www-secure.symantec.com/connect/videos/how-block-flash-disk-application-and-device-policy

Best Regards.
Fatih