Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

How to see written activity on USB drive?

Updated: 21 May 2010 | 12 comments
Sumit Bose's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Dear all,

How can I find out that are the files written on USB Drive?

Warm regards,

Sumit Bose

Comments

kavin's picture
02
Aug
2009
1 Vote +1
Login to vote

Under Application & device

Under Application & device control policy you can select the option for " "Log files written to USB drives."

The logs can viewed under

Logs can be viewed in SEP client console under View Logs menu > Client Management > Control Log...
Logs can be viewed in SEP Manager under Monitors menu > Logs tab - Log Type: Application and Device Control, Log Content: Application Control - Select View Log

Please mark this as a solution ito this thread if this works.:)

Constantine's picture
28
Jan
2010
0 Votes 0
Login to vote

all usb activities are not logged correctly

i have one policy which blocks USB devices, and second policy which logs all activities written to USB devices (for those users who has right to use usb device).

in the second policy:
 
1."marked  "Log files written to USB drives" option
2. assigned to those groups of users, who has right to use USB devices.

when i wanted to see logs of those users who transferred some files on USB, i received output (see below)...

there was said that more effective way for logging, will be use of wildcards *,:

Question:
Exaclty where i have to add this wildcard in policy?

777.jpg

Ajit Jha's picture
02
Aug
2009
0 Votes 0
Login to vote

Are u talking about the Log

Are u talking about the Log or the content of the USb drive??? I am not quite clear with ur query, please elaborate it

Ajit

Regards'

Ajit Jha

Technical Consultant

STS

ajeet kumar's picture
03
Aug
2009
0 Votes 0
Login to vote

Thank you kavin, i think it's

Thank you kavin, i think it's correct procedure to see logs files.

@Ajitjha If user copy any data from the PC to USB, N/w, CD,DVD,Floppy, SEP will trace the location of files.

Hope u understand!

regards,
Ajeet Kumar

ajeet kumar's picture
03
Aug
2009
3 Votes +3
Login to vote

One thing i want to add

One thing i want to add here

when u configure this policy use wildcard *
so that all process will come in logs.

Thank you

Sumit Bose's picture
03
Aug
2009
0 Votes 0
Login to vote

Thank you

Dear all,

Thanks for the responce.

Kavin your suggestion is the correct one but i woluld like to mark the sulotion to Ajeet as using wildcard it works more efficntly

Warm regards.
Sumit Bose

kavin's picture
03
Aug
2009
0 Votes 0
Login to vote

No Problem Sumit I am happy

No Problem Sumit I am happy you got the solution.

brav's picture
04
Sep
2009
0 Votes 0
Login to vote

Hi, Where is the option to

Hi,

Where is the option to Log files written to USB drives , I cannot see it anywhere ??

Thanks

m00

ajeet kumar's picture
05
Sep
2009
0 Votes 0
Login to vote

To check logs click on

To check logs click on monitor-logs-application & device control

brav's picture
15
Sep
2009
0 Votes 0
Login to vote

Hi , I know where th check

Hi , I know where th check the logs , I just can't see any option to select "Log Files written to USB Drives" .... in the Application | Device Control Policy

m00

JMaurath's picture
28
Jan
2010
0 Votes 0
Login to vote

Currently

There is no way to search by rule name...I have put in the suggestion back during the original release of SEP 11...still don't see the functionality....

Hurricane Andrew's picture
09
Apr
2010
0 Votes 0
Login to vote

(No subject)

"Hurricane" Andrew

Milford, Delaware