Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

log Reports When usb device is inserted

Created: 08 Oct 2012 | 3 comments

Hi All,

I want get alert when user trying to access usb device ,  we are dissabling through

symantec group policies. Even if it blocks also it should intimate. And Reports to symantec administrator.

so that we can come to know someone is trying to access USB Devices.

Discussion Filed Under:

Comments 3 CommentsJump to latest comment

Ashish-Sharma's picture

Solution

Open and login to the SEPM

Click Monitors

Click Notifications

Click Notification Conditions

Click Add

Select Client security alert

check out the required option(Device Control events) under "What settings would you like for this notification?"

 

 
Outbreak type:

Occurrences on any computer

 
Compliance events Device Control events  
Network Threat Protection events Traffic events  
Packet events Application Control events  
Notification condition:  occurrenc

Set the notifcation condition

Then Add your email id here.

Then Ok

This process will help to get the Device acess log in Email.

Policy to LOG activity in a USB drive by Symantec Endpoint Protection (SEP)

http://www.symantec.com/business/support/index?page=content&id=TECH155578

Check this thread

https://www-secure.symantec.com/connect/forums/notification-usb-device

Thanks In Advance

Ashish Sharma

 

 

Ashish-Sharma's picture

Hi,

did you received your answer ?

Thanks In Advance

Ashish Sharma