This issue needs a solution.

Symantec Endpoint Protection doesn't block usb drives in windows xp

Created: 04 Oct 2012 | Updated: 04 Oct 2012
8bit geko's picture
8bit geko
Login to vote
0 0 Votes

I'd like to share some problem that I have in the company that I work. We have installed Endpoint protection (12.1.1.1101.401 RU1 MP1) in 200 computers located in 2 sites (two cities). Everything works fine, except that I want to block usb storage to the computers. I made a policy for that and works fine for the computers in my first site (both windows xp and 7 OS), but in the second site the policy only works for windows 7 computers. The policy is the same for both sites. I've also tried to add USBSTOR* in device ID to block, but it still works only for windows 7 computers. Can someone give an advice?

Filed Under

Tags:
, , , , , ,

Comments

Ashish-Sharma
Accredited
04
Oct
2012
Votes
0

HI, What SEP feature

HI,

What SEP feature Installed in SEP client ?

Kindly Verify SEP client policy no and SEP group policy no are same ?

How to block or allow device's in Symantec Endpoint Protection

http://www.symantec.com/connect/articles/how-block-or-allow-devices-symantec-endpoint-protection

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents  

 

8bit geko
04
Oct
2012
Votes
0

in SEP client we have Virus

in SEP client we have Virus and Spyware protection, proactive threat protection and network thread protection enabled. 

I have tried to block every usb device, usb, mice, etc but doesn't work for windows xp.

I'm sure that I have updated the policy in client and restarted the computer.

How can I find the policy No from the client? I can see the policy No for the client from the server.

Please note that in our computers we had some other endpoint protection version that didn't have any options for device blocking - but we bought the version that has that ability and upgraded all computers with that one (unistalled old version and installed new one). 

Ashish-Sharma
Accredited
04
Oct
2012
Votes
0

 HI, Check Help and support

 HI,

Check Help and support -> Troubleshooting

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents  

 

8bit geko
04
Oct
2012
Votes
0

Thank you. Yes, it's the same

Thank you. Yes, it's the same policy serial no. I'll try manually to export the policy from a working xp computer, to a non working one and see what happens. Any other ideas?

Ashish-Sharma
Accredited
04
Oct
2012
Votes
0

HI, Try to Open any to any

HI,

Try to Open any to any firewall port sep client to SEPM ?

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents  

 

8bit geko
04
Oct
2012
Votes
0

I've disabled both sep

I've disabled both sep firewall and windows firewall in a client that I'm testing (updated policy) but still usb is not blocked

Ashish-Sharma
Accredited
04
Oct
2012
Votes
0

hi, Try to export new client

hi,

Try to export new client package and install one client check may be help.

If not help please raised support ticket..

 

Please contact Symantec Technical Support via the support phone numbers listed below

Regional Support Telephone Numbers:
United States: 800-342-0652 (407-357-7600 from outside the United States)
Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
United Kingdom: +44 (0) 870 606 6000
Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp   India: Toll-Free 000 800 4401 456 directly                                                                                                       

Contact Symantec Customer Care on 

http://www.symantec.com/support/assistance_care.jsp

OR 

Technical Support

http://www.symantec.com/business/support/contact_techsupp_static.jsp

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents  

 

pete_4u2002
Symantec Employee
04
Oct
2012
Votes
0

have the policy been updated

have the policy been updated to clients?

did you try restarting the client after the policy updated?

Cheers!
Pete

Help Link: http://www.symantec.com/business/support/overview.jsp?pid=54619

8bit geko
05
Oct
2012
Votes
0

ok fixed it. I pushed a new

ok fixed it. I pushed a new version of the client to the computers and changed the policy to block all deviceIDs starting with USBSTOR*

Ashish-Sharma
Accredited
05
Oct
2012
Votes
0

HI, Good to Hear your problem

HI,

Good to Hear your problem are resolved after Pushed new SEP client Package :)

Thanks In Advance

Ashish Sharma

SEPM Knowledgebase Documents