Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrade.
Please accept our apologies in advance for any inconvenience this might cause.

Block All usb removal disksand Exclude Data Cards

Created: 21 Jun 2010 | 7 comments

Hi  All,

I need to block usb pendrives and External HDD drives   but i need to exclude our company provided Internet USB Data Cards.
Please guide me how to do it in  detail.

With advanced thanks
Raj

Discussion Filed Under:

Comments 7 CommentsJump to latest comment

P_K_'s picture

Title: 'How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.'
Document ID: 2008102008020548
> Web URL: http://service1.symantec.com/support/ent-security....

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

SRaj's picture

HI Prchand,

Iam able to block all usb pendrive and Ext HDD driver. But how to exclude Internet Data Cards.
which  device ID i need to add 
1. Either Modem
2.Qual comm MMC storage

With thanks
Raj

AravindKM's picture

I think you have to add both
You can also use wild cards
refer this example
For instance on my machine, I have a USB device (Apple iPhone) which is recognised as:
 
 
 
\USB\Vid_05ac&Pid_1292\9f5bce6ec6831ba6c2520874ebca5f1ce17ac5c6
 
 
 
If I wanted to block that single device I could use the above string.
 
 
 
If I wanted to block all Apple iPhones, I could use the following:
 
 
 
\USB\Vid_05ac&Pid_1292\*
 
 
 
If I wanted to block all Apple USB devices, I could use this:
 
 
 
\USB\Vid_05ac*
 
 
 
If I wanted to block all Apple devices, I could try this:
 
 
 
\*\Vid_05ac*
 
 
 
In the above example,
 
 
 
Vid_05ac - Vendor ID 05ac - Apple
Pid_1292 - Product ID

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

P_K_'s picture

Plug the device and go to the Device Manager  and now see where the card is listed.If it is listed on more than one place then you need to exclude both

MCT MCSE-2012 Symantec Technical Specialist (SCTS)

Fatih Teke's picture

Hello Sraj
This video will help you too.

https://www-secure.symantec.com/connect/videos/how-block-flash-disk-application-and-device-policy

Best Regards.
Fatih

 Everything works better when everything works together.