Video Screencast Help

How to prevent reading of files in SEPM 12.1

Created: 10 Aug 2012 • Updated: 15 Aug 2012 | 10 comments
This issue has been solved. See solution.

I've been trying out the Application and Device Control Feature in SEPM 12.1

I can prevent writing of files to USB flash drives but I would like to know how to prevent reading of files from USB flash drives.

Thanks,
Mitka

Comments 10 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

Check these Articles:

How to make USB drives read-only with Symantec Endpoint Protection using Application and Device Control

http://www.symantec.com/business/support/index?page=content&id=TECH95813

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://www.symantec.com/business/support/index?page=content&id=TECH138570

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mitka's picture

Thanks for the infomation, however, I'm trying to prevent reading of files from USB.

I already have it set as read only but that allows files to be read.

Thanks,
Mitka

Brɨan's picture

So you want to block USBs completely I assume?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mitka's picture

That's correct. It has write to usb block already.
Just need read from usb block now.

Thanks,
Mitka

Brɨan's picture

Create a new class ID:

Then set it up so it can be blocked with device control:

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Check this Article:

How to Block or Allow Devices in Symantec Endpoint Protection

http://www.symantec.com/docs/TECH175220

Hope that helps!!

Mithun Sanghavi
Associate Security Architect

MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ashish-Sharma's picture

Hi,

You can check this artical.

How to block USB hard drives in SEP, but allow reading specific USB drives in the SEPM Application and Device Control Policy

http://www.symantec.com/business/support/index?page=content&id=TECH173724

blocking only USB pendrive by Symantec Endpoint protection 12.1

http://www.symantec.com/connect/forums/blocking-only-usb-pendrive-symantec-endpoint-protection-121

Thanks In Advance

Ashish Sharma

Chetan Savade's picture

Hi,

You can acheive it throuh application control policy, please specify required action.

Screenshot is attached for reference.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SOLUTION
NRaj's picture

In the application rule set, add the devices as required, go to actions tab > under "read attempt" choose block.

Hope that helps.

Mitka's picture

Thanks for all of your help folks.
Chetan and NRaj solutions suited me best.

Mitka