Video Screencast Help

How to see written activity on USB drive?

Created: 03 Aug 2009 • Updated: 21 May 2010 | 12 comments
Sumit Bose's picture
This issue has been solved. See solution.

Dear all,

How can I find out that are the files written on USB Drive?

Warm regards,

Sumit Bose

Comments 12 CommentsJump to latest comment

kavin's picture

Under Application & device control policy you can select the option for " "Log files written to USB drives."

The logs can viewed under

Logs can be viewed in SEP client console under View Logs menu > Client Management > Control Log...
Logs can be viewed in SEP Manager under Monitors menu > Logs tab - Log Type: Application and Device Control, Log Content: Application Control - Select View Log

Please mark this as a solution ito this thread if this works.:)

Constantine's picture

i have one policy which blocks USB devices, and second policy which logs all activities written to USB devices (for those users who has right to use usb device).

in the second policy:
 
1."marked  "Log files written to USB drives" option
2. assigned to those groups of users, who has right to use USB devices.

when i wanted to see logs of those users who transferred some files on USB, i received output (see below)...

there was said that more effective way for logging, will be use of wildcards *,:

Question:
Exaclty where i have to add this wildcard in policy?

777.jpg

Ajit Jha's picture

Are u talking about the Log or the content of the USb drive??? I am not quite clear with ur query, please elaborate it

Ajit

Regard's

Ajit Jha

Technical Consultant

ASC & STS

ajeet kumar's picture

Thank you kavin, i think it's correct procedure to see logs files.

@Ajitjha If user copy any data from the PC to USB, N/w, CD,DVD,Floppy, SEP will trace the location of files.

Hope u understand!

regards,
Ajeet Kumar

ajeet kumar's picture

One thing i want to add here

when u configure this policy use wildcard *
so that all process will come in logs.

Thank you

SOLUTION
Sumit Bose's picture

Dear all,

Thanks for the responce.

Kavin your suggestion is the correct one but i woluld like to mark the sulotion to Ajeet as using wildcard it works more efficntly

Warm regards.
Sumit Bose

kavin's picture

No Problem Sumit I am happy you got the solution.

brav's picture

Hi,

Where is the option to Log files written to USB drives , I cannot see it anywhere ??

Thanks

m00

ajeet kumar's picture

To check logs click on monitor-logs-application & device control

brav's picture

Hi , I know where th check the logs , I just can't see any option to select "Log Files written to USB Drives" .... in the Application | Device Control Policy

m00

JMaurath's picture

There is no way to search by rule name...I have put in the suggestion back during the original release of SEP 11...still don't see the functionality....