Endpoint Protection

 View Only
Expand all | Collapse all

Policy not working

  • 1.  Policy not working

    Posted Feb 05, 2013 11:22 AM
    Laptop webcam is not getting enable even i have exclude the class id of imaging device.


  • 2.  RE: Policy not working

    Posted Feb 05, 2013 11:25 AM

    What is blocking it? Firewall, IPS? Application and device control policy?

    Can you check the security log on the client for verification?



  • 3.  RE: Policy not working

    Posted Feb 05, 2013 11:28 AM
    Through ADC policy.


  • 4.  RE: Policy not working

    Posted Feb 05, 2013 11:28 AM
    Can you explain how the policy you have applied?


  • 5.  RE: Policy not working

    Posted Feb 05, 2013 11:32 AM

    So you want to block devices but allow others.

    Did the policy change you made take affect on the client? Can you verify client has same policy as what is showing in the SEPM?

    I trust you have seen this technote, which can be used as a template for what you're doing:

    How to block USB flash drives while allowing other USB devices.

    Article:TECH104299  |  Created: 2008-01-28  |  Updated: 2012-02-21  |  Article URL http://www.symantec.com/docs/TECH104299

     

    Can you check the log to see what it says, perhaps something else is being blocked and that needs to be excluded as well.



  • 6.  RE: Policy not working

    Posted Feb 05, 2013 11:34 AM
    Is it inbuilt webcam or external? How many Laptop where same problem? What the exact policy applied?


  • 7.  RE: Policy not working

    Posted Feb 05, 2013 11:36 AM

    go to any single client and check the policy which is blocking and change the setting accordingly in the sepm firewall policy.



  • 8.  RE: Policy not working

    Broadcom Employee
    Posted Feb 05, 2013 11:49 AM
    check the device id and exclude the webcam


  • 9.  RE: Policy not working

    Posted Feb 05, 2013 01:39 PM

    Considering its builtin Webcam for the laptop..and Deivce ID is USB/VID...

    check in your device control policy if you have something with USB/VID* blocked using Device ID.



  • 10.  RE: Policy not working

    Posted Feb 08, 2013 11:25 AM
    i have applied the policy with full restricted except human interface and web cam


  • 11.  RE: Policy not working

    Broadcom Employee
    Posted Feb 08, 2013 11:27 AM

    did you try device id as an exclusion?



  • 12.  RE: Policy not working

    Posted Feb 08, 2013 11:28 AM
    Alll are in built webcam but my engineer confirm it connected in usb port which are internal available Approx. 5 user compliant me


  • 13.  RE: Policy not working
    Best Answer

    Posted Feb 08, 2013 11:32 AM

    Have you tried to provide the acess using that Laptop's device id.

    If not then please try the same.

    Below link help you

    https://www-secure.symantec.com/connect/downloads/devviewer-tool-helpful-application-and-device-control-find-hardware-device-id-and-guid



  • 14.  RE: Policy not working

    Posted Feb 08, 2013 11:34 AM
    No. I will be check it.