Endpoint Protection

Dear All,
I want to block USB disk.  client have AV& AS, NTP with application device control.

Hi,

Please check the following articles that explain on how to go about doing this.

How to block USB flash drives while allowing other USB devices.

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/ce3a83c1ce5ca4cf492573fd005d28dc?OpenDocument

How to use Application and Device Control to block all USB devices except those I specifically want to allow

http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/1efaa7a014a86f15ca2574b6001da12f?OpenDocument

Please let me know if this helps :-)

hi,
also check if this is helpful

http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009021813553348

Use application and device controll policy to block usb devices except keyboard and mouse.

use http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/ce3a83c1ce5ca4cf492573fd005d28dc?OpenDocument link for reference.

Hi

Use the aaplication and device control policy to block the devices. Create a device policy and exclude the human interface devices and the printer and scanner because if the printer and scanner is USB it will also get blocked.
U can get help from this link as well
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2009021813553348

Ajit

Steps:
1.Go to Policies-Policy Components-Hardware Device
2.Add- give here device ID
3.Select the Group-polices-Application and device control-Device control
4.Under Blocked Devices-Add, select here usb device

Also check links given by Amol

Thanks
Ajeet

Thanks to all of You.
@Ajeet how to know device id? where i can find the device id in the console?

If you have SEPM CD2
Then go to following location and find the
1.Open the CD2-Tools-No Support-DevViewer

2.Insert the USB device and run this tool

3.Under DiskDrive you can see USB drive-Select it.

4.Right side you can see Device ID, copy it in notepad

5.Add this ID


let me know if it's work

Hey!!! thank you it's working

Nice to hear that the solutions worked.

Ajit