Endpoint Protection

 View Only
  • 1.  Device Control - Storage Volumes

    Posted Jul 21, 2011 10:05 AM

    Finally, x64 device control polcies are working.  Been waiting for these for a long time. 

    So once upon a time, we had set up our policies for the very few x32 machines we had left.  Now, those are all gone and only x64 in the network.

    I rolled out SEP 12.1 without thinking too much about these old policies that were still implemented.

    * * * * The Problem * * * *

    After rolling out SEP, I started getting lots of phone calls that "drives" were dissappearing on the users.  Investigating further, I noticed that I has "storgae volumes" blocked in my policies. 

    The machines have: 2 1 TB striped together creating a Volume.  So once I removed that portion of the policy everything came back to normal.  I added blocking of USB devices and I have some testing to do.  But if I recall correctly, way back when (SEP 11.1) Storage Volumes was the generic term given for all Thumb Drives, Phones, Pads, etc.  Is this still the case?

    I wanted to create an exception for the Volumes, but the GUID is exactly the same as the default "Storage Volumes". 

    Any suggestions or insight for USB, Pads, phones, etc?

    Thanks.



  • 2.  RE: Device Control - Storage Volumes

    Posted Jul 31, 2011 08:43 PM

    Hook them up to your PC and run Devviewer to see what the GUID is and create a policy based upon that.