Endpoint Protection

 View Only
  • 1.  Symantec Endpoint Protection Device Control

    Posted Mar 25, 2015 09:57 PM

    What are the features of S.E.P's device control? 

     

    I.e can it track data transferred from a server to a USB? Can it track if the transfers the data to a non-corporate server/desktop? 

     

    Thanks,

    Kimberley



  • 2.  RE: Symantec Endpoint Protection Device Control

    Posted Mar 25, 2015 10:01 PM

    Symantec Endpoint Protection Application and Device Control

    http://www.symantec.com/security_response/securityupdates/list.jsp?fid=adc

    can it track data transferred from a server to a USB?

    how to use symantec endpoint protection (SEP) to monitor the USB device activite

    Article:TECH155578 | Created: 2011-03-15 | Updated: 2011-03-22 | Article URL http://www.symantec.com/docs/TECH155578

    Can it track if the transfers the data to a non-corporate server/desktop?

    Not possible,You can use Symantec different product DLP.



  • 3.  RE: Symantec Endpoint Protection Device Control

    Posted Mar 25, 2015 10:03 PM

    Yes, it absolutely can log all information copied to a USB device. Assuming you have SEP install on the non-corp device you can still track the information, although it can be a bit more tricky to setup. You can also block and allow whichever devices you want.

    Please see these:

    About application and device control

    About Application and Device Control policies

    About the structure of an Application and Device Control policy



  • 4.  RE: Symantec Endpoint Protection Device Control

    Trusted Advisor
    Posted Mar 26, 2015 04:34 AM

    Hello,

    Can it track data transferred from a server to a USB?

    Yes, it can track data transferred from a server to a USB.

     

    Check these Articles:

    How Symantec™ Endpoint Protection Handles Device Control

    http://www.symantec.com/docs/TECH216098

    About the structure of an Application and Device Control policy

    http://www.symantec.com/docs/HOWTO81236

    How to use symantec endpoint protection (SEP) to monitor the USB device activites

    http://www.symantec.com/docs/TECH155578

     

     

    Solution

    1. Open and login to the SEPM
    2. Click Monitors
    3. Click Notifications
    4. Click Notification Conditions
    5. Click Add
    6. Select Client security alert

    check out the required option(Device Control events) under "What settings would you like for this notification?"

     
    Outbreak type:

    Occurrences on any computer

     
    Compliance events Device Control events  
    Network Threat Protection events Traffic events  
    Packet events Application Control events  
    Notification condition:  occurrenc

        7. Set the notifcation condition

        8. Then Add your email id here.

        9. Then Ok

        10. This process will help to get the Device acess log in Email.

     

     

    Hope that helps!!