Endpoint Protection

Hi ,

I am using SEPManager version 12.1.1101.401 on windows server 2008.

Can we check logs of files being read or write to USB drive/CD drive/external storage devices and also can we have mail trigger when ever user reads/writes from external drives and cd drives?

Can we have mail triggers only for specific file type like pdf,docs etc.,???

As we have allowed access to storage devices and CD drives to few users , we need to check what  users are reading from and writing on to those drives?

Check these documents

Policy to LOG activity in a USB drive by Symantec Endpoint Protection
http://www.symantec.com/business/support/index?page=content&id=TECH131125
http://www.symantec.com/business/support/index?page=content&id=TECH155578

hello,

Look this some discussion

http://www.symantec.com/connect/forums/it-possible-monitor-which-files-are-copied

https://www-secure.symantec.com/connect/forums/usb-logging

Tq Rafeeq

Hi all,

I am able to view the logs , but can we create a email trigger also for these logs? If yes , please help me to create mail alert.

Regards,

Anoop Jeevan.

Solution

Open and login to the SEPM

Click Monitors

Click Notifications

Click Notification Conditions

Click Add

Select Client security alert

check out the required option(Device Control events) under "What settings would you like for this notification?"

Set the notifcation condition

Then Add your email id here.

Then Ok

This process will help to get the Device acess log in Email.

Tq rafeeq Thank you very much