Generate Logs when usb attached in the system
Created: 27 Apr 2012 | 4 comments
Dear All,
I am using SEPM version i want to have complete logs when any usb storage devices ll attached to any system where SEP client installed . i tried but when i applied any policy like blocked or unblocked usb storages then it generate logs. But if i applied nothing for usb storage device and try to attached usb storage in the system then it can't generate any logs . Is this possible without applying any device control policy SEPM generate logs when any of usb storage device attached with the syste.
2: Can its possible in SEPM then when generate its gives information to the SEPM manager that this file is copied and these were other things in that usb storage devices.
your urgent response ll be highly appreciated
Thanks
Noor
Discussion Filed Under:
Group Ownership:
Comments 4 Comments • Jump to latest comment
Under ADC policy choose continue processing other rules & choose logging as mentioned below.
Also the below links might help
Policy to LOG activity in a USB drive by Symantec Endpoint Protection (SEP)
http://www.symantec.com/business/support/index?page=content&id=TECH131125
How to configure Application Control in Symantec Endpoint Protection 11.0 : Configuring Application Control Policies
http://www.symantec.com/business/support/index?page=content&id=TECH102525
How to block users to perform download of files with specific extentions using Application and Device Control.
https://www-secure.symantec.com/connect/articles/how-block-users-perform-download-files-specific-extentions-using-application-and-device-con
Agree with NRaj. Thumb Up.
Thanks.
Nraj...I want run time logs of every activity performing on SEPM cleints and server although that storage device is blocked or unblocked.
If this is possible in SEPM then let me know
your urgent response is highly appreciated
Thanks
Noor
Noor, As you can see in the screenshot attached, the logging is a separate check-box independent of the actions (read, write & block, unblock). So this should work.
Would you like to reply?
Login or Register to post your comment.