Video Screencast Help

Generate Logs when usb attached in the system

Created: 27 Apr 2012 | 4 comments
Noor Shaikh's picture

Dear All,

 

I am using SEPM version i want to have complete logs when any usb storage devices ll attached to any system where SEP client installed . i tried but when i applied any policy like blocked or unblocked usb storages then it generate logs. But if i applied nothing for usb storage device and try to attached usb storage in the system then it can't generate any logs . Is this possible without applying any device control policy SEPM generate logs when any of usb storage device attached with the syste.

 

2: Can its possible in SEPM then when generate its gives information to the SEPM manager that this file is copied and these were other things in that usb storage devices.

 

your urgent response ll be highly appreciated

 

Thanks

Noor

Comments 4 CommentsJump to latest comment

NRaj's picture

Under ADC policy choose continue processing other rules & choose logging as mentioned below.

 

Also the below links might help

Policy to LOG activity in a USB drive by Symantec Endpoint Protection (SEP)

http://www.symantec.com/business/support/index?page=content&id=TECH131125

How to configure Application Control in Symantec Endpoint Protection 11.0 : Configuring Application Control Policies

http://www.symantec.com/business/support/index?page=content&id=TECH102525

How to block users to perform download of files with specific extentions using Application and Device Control.

https://www-secure.symantec.com/connect/articles/how-block-users-perform-download-files-specific-extentions-using-application-and-device-con

AttachmentSize
adc.doc 238 KB
Noor Shaikh's picture

Nraj...I want run time logs of every activity performing on SEPM cleints and server although that storage device is blocked or unblocked.

If this is possible in SEPM then let me know

your urgent response is highly appreciated

 

Thanks

 

Noor

NRaj's picture

Noor, As you can see in the screenshot attached, the logging is a separate check-box independent of the actions (read, write & block, unblock). So this should work.