Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrades.
Please accept our apologies in advance for any inconvenience this might cause.

How to prevent reading of files in SEPM 12.1

Created: 10 Aug 2012 • Updated: 15 Aug 2012 | 10 comments
This issue has been solved. See solution.

I've been trying out the Application and Device Control Feature in SEPM 12.1

I can prevent writing of files to USB flash drives but I would like to know how to prevent reading of files from USB flash drives.

Thanks,
Mitka

Comments 10 CommentsJump to latest comment

Mithun Sanghavi's picture

Hello,

Check these Articles:

How to make USB drives read-only with Symantec Endpoint Protection using Application and Device Control

http://www.symantec.com/business/support/index?page=content&id=TECH95813

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://www.symantec.com/business/support/index?page=content&id=TECH138570

Hope that helps!!

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Mitka's picture

Thanks for the infomation, however, I'm trying to prevent reading of files from USB.

I already have it set as read only but that allows files to be read.

Thanks,
Mitka

_Brian's picture

So you want to block USBs completely I assume?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mitka's picture

That's correct. It has write to usb block already.
Just need read from usb block now.

Thanks,
Mitka

_Brian's picture

Create a new class ID:

 

Then set it up so it can be blocked with device control:

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Check this Article:

How to Block or Allow Devices in Symantec Endpoint Protection

http://www.symantec.com/docs/TECH175220

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ashish-Sharma's picture

Hi,

You can check this artical.

How to block USB hard drives in SEP, but allow reading specific USB drives in the SEPM Application and Device Control Policy

http://www.symantec.com/business/support/index?page=content&id=TECH173724

 

blocking only USB pendrive by Symantec Endpoint protection 12.1

http://www.symantec.com/connect/forums/blocking-only-usb-pendrive-symantec-endpoint-protection-121

Thanks In Advance

Ashish Sharma

 

 

Chetan Savade's picture

Hi,

You can acheive it throuh application control policy, please specify required action.

Screenshot is attached for reference.

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SOLUTION
NRaj's picture

In the application rule set, add the devices as required, go to actions tab > under "read attempt" choose block.

 

Hope that helps.

Mitka's picture

Thanks for all of your help folks.
Chetan and NRaj solutions suited me best.

Mitka