Endpoint Protection

Does anyone have a way of simply logging files read/written to removeable usb media that can be done on an x64 system.  I have it in place now through application control on x86 systems, but I'm just wondering if anyone has come up with a way to pull that off without the x64 support for application and device control.  If that's literally the only criteria (besides not spending money), does anyone have any ideas?  Even if it doesn't involve SEP?  Can it possibly be done with Windows?  Thanks for your help.

Hi,

I do not know of any way to do this on x64 bit systems with SEP (currently), or with Windows natively. However there are a number of free alternatives that you might consider. I could suggest a couple but it really depends on exactly what kind of logging you had in mind. For instance logs only when blank detects a virus, or maybe you want a log of every usb plugged into the system ect ect. So if you could tell us what exactly you are looking for maybe we can suggest some narrowed down alternatives.

Cheers
Grant

The way Appication and device cotrol is not suppoted on a 64 bit machine. I think even Logging files transferred to/from USB media on 64 bit may not work. but we need to check that.

What I'm looking for is a way to log every usb device plugged into the system plus the actual file names of files that are transferred.  Prachand - I have tried what you're suggesting and it doesn't work.  Any free possible alternatives that I could look into would be helpful.  Thanks.

At present you cannot do this through SEP sice Application and Device Control Policy will not work on 64 bit clients.ref:Symantec Endpoint Protection 11.0 compatibility with 64-bit platform.How ever an idea is already present in idea section and as per it is in development.Ref:Application and Device Control Policy on 64 bit clients

I realize SEP should do the job, but 64-bit support has been promised for some time now and has not been delivered as promised.