Endpoint Protection

Hi,

I configured the Application Control Policy by adding in the USB Device ID into excluded list and USB class in the blocked list.

It works for some of the USB thumb drives but there are still some USB thumb drives being blocked even though the Device ID is added into the excluded list.

I check the Device Manager and saw that USB Controllers, the USB thumb drive is not being blocked. However under Disk Drive, the USB thumb drive is blocked.

Why is that so? Does it mean that I should add in two device ID for a single thumb drive? As i mentioned earlier, not all USB thumb drives encounter this problem. Why is that so?

Hello Tanyc.
Can you check your excluted devices in same application and device policy and ofcourse you check it but i want to say, are you sure the client taken new policy from sep manager?
I hope this will be help.
Please write again if problem will continue.

Hi,

Yes I am confirmed that the excluded devices are all in the same application and device control policy. Security Policy is also being pushed down to the client. I did a restart on the client computer also and its been a day since I tested it out again. Yet I still cannot access the USB thumb Drive.

It is ok with another PC of different model. Is it because of the different Hardware platform that causes this problem?

From the Device Manager, I can see that USB is not blocked which is the desired result. But under the Disk Drive, it is being blocked. Do I need to go through the trouble to adding in the Disk Drive Device ID and the USB Device ID in order for it to work?