Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Devviewer tool

Created: 21 Aug 2013 • Updated: 22 Aug 2013 | 9 comments
This issue has been solved. See solution.

Guys! I have a issue..need your help. how can i create a rule that will allow only specific usb .

Operating Systems:

Comments 9 CommentsJump to latest comment

Ambesh_444's picture

Hello BSDN,

How to create a rule that will allow only specific USB’s on to your network.
http://service1.symantec.com/support/ent-security.nsf/docid/2009031809381448

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Sachin Sawant's picture

move to right forum.

Brɨan's picture

How to block USB flash drives while allowing other USB devices.

Article:TECH104299  |  Created: 2008-01-28  |  Updated: 2012-02-21  |  Article URL http://www.symantec.com/docs/TECH104299

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Rafeeq's picture

check this document
How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

 

http://www.symantec.com/business/support/index?page=content&id=TECH106304

Here is the Step by Step procedure

https://www-secure.symantec.com/connect/articles/how-block-or-allow-devices-symantec-endpoint-protection

Mithun Sanghavi's picture

Hello,

DevViewer is a very helpful tool when it comes to finding GUID and Device ID of any hardware.
We need Device ID's for Device Control to either block it or put is an exception.

Check these few articles below on when to use it -

How to Block or Allow Devices in Symantec Endpoint Protection

http://www.symantec.com/docs/TECH175220

How to create a rule that will allow only specific USB’s on to your network.

http://www.symantec.com/docs/TECH92943

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://www.symantec.com/docs/TECH106304

How to use Application and Device Control to block all USB devices except those I specifically want to allow

http://www.symantec.com/docs/TECH105770

DevViewer - a tool for finding hardware device ID for Device Blocking in Symantec Endpoint Protection

http://www.symantec.com/docs/TECH103401

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Chetan Savade's picture

Hi,

I would encourage you to search first against available database for this kind of small queries.

Here is the 'SEP knowledge base' search link:

http://www.symantec.com/business/support/index?page=content&key=54619&channel=TECHNICAL_SOLUTION

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

AjinBabu's picture

Hi,

Setting up application and device control

You can set up application and device control by performing some typical tasks.

Table: Setting up application and device control

Task

Description

Enable default application control rule sets

Application and Device Control policies contain default application control rule sets. The default rule sets are disabled. You can enable any sets that you need.

Note:

If the default rule sets do not meet your requirements, create custom rule sets.

The default rule sets are configured in production mode rather than test mode. However, you can change the setting to test mode and test the rules in your test network before you apply them to your production network.

Note:

Client computers require a restart when you enable application control rules.

Create and test custom application control rule sets

You can create custom application control rule sets. Typically only advanced administrators should perform this task.

Note:

Client computers require a restart when you enable application control rules.

Create exceptions for application control

Application control might cause problems for some applications that you run in your network. You can exclude applications from application control. You use an Exceptions policy to specify the exception.

Set up system lockdown

System lockdown controls the allowed applications on your client computers.

Configure device control to allow or block hardware devices

Device control specifies what hardware devices are allowed or blocked on your client computers.

Symantec Endpoint Protection Manager provides a device list that you can use in the device control configuration. You can add devices to the list.

View the Application Control and Device Control logs

You can view the application control and device control events in the Application Control log and the Device Control log in Symantec Endpoint Protection Manager.

On the client computer, application control and device control events appear in the Control log.

Note:

You might see duplicate or multiple log entries for a single application control action. For example, if explorer.exe tries to copy a file, it sets the write and delete bits of the file's access mask. Symantec Endpoint Protection logs the event. If the copy action fails because an application control rule blocks the action, explorer.exe tries to copy the file by using only the delete bit in the access mask. Symantec Endpoint Protection logs another event for the copy attempt.

Prevent or allow users from enabling or disabling application and device control

You can prevent or allow users from enabling or disabling application and device control on the client. Use the setting in the Client User Interface Settings dialog.

Regards

Ajin

AJ_01's picture

You have to use the dev viewer tool to find the device id of that particular usb

http://www.symantec.com/business/support/index?pag...

Regard

AJ