let know if this helps

Importing or merging file fingerprint lists in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/HOWTO55138

An answer would be great to Question 1....

Hello,

Could you please clearify the Question 1 ?

However, check the following Articles:

How to configure System Lockdown in Symantec Endpoint Protection 11.0

http://www.symantec.com/docs/TECH102526

Managing file fingerprint lists

http://www.symantec.com/docs/HOWTO55133

Configuring system lockdown

http://www.symantec.com/docs/HOWTO80848

Importing or merging file fingerprint lists in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/HOWTO55138

How to configure System Lockdown to allow Microsoft Security Updates

http://www.symantec.com/docs/TECH103977

Enabling system lockdown to run in whitelist mode

http://www.symantec.com/docs/HOWTO80850

Also, check this Article:

https://www-secure.symantec.com/connect/articles/what-system-lockdown-what-stages-do-i-implement-system-lockdown-symantec-endpoint-protectio

Hope that helps!!

You could also contact Support:

Phone numbers to contact Tech Support:-

Regional Support Telephone Numbers:
United States: 800-342-0652 (407-357-7600 from outside the United States)
Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
United Kingdom: +44 (0) 870 606 6000

India: Toll-Free 000 800 4401 456 directly

IDD call: +61 2 8220 7111

Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp

Customer Care Contact Numbers for Licensing Issues:-

http://www.symantec.com/support/assistance_care.jsp

How to create a new case in MySupport

http://www.symantec.com/business/support/index?page=content&id=TECH58873

Importing or merging file fingerprint lists in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/HOWTO55138

Hope this is useful 

Hi All,

MY question is:-

1. If I want to get all the process at starting mode then how I can do that?
2. If I want to allowed some processes which are appearing in “View Unapproved Application” then how I can do that?
3. What would happen if I have put the policy “Step2:- Enable System lockdown” now?
4. If I want to collect the fingerprint file first time so what are the different way to do that?(Around 100 system in remote location)

Q1) will come back to you when i find the selution .

For Q2, Q3, Q4, see the below please.

For Q2) hope that is helpful:

https://www-secure.symantec.com/connect/forums/sepv11-importing-unapproved-application-list-fingerprint-system-lockdown

Q3)  well maybe that will be helpful for Q3) 

Setting up and testing the system lockdown configuration before you enable system lockdown

http://www.symantec.com/docs/HOWTO80849

 Q4)  maybe that will be helpful

http://www.symantec.com/docs/HOWTO55133

Hope this will be good

if the first one didnt work because of V. deffrence

SEPv11 - Importing Unapproved Application List into Fingerprint for System Lockdown

you rather use the selution below or check the other links down,

You can import them for your firewall rules.

and for App control

go to SEPM - Policies - Policy Components - File Finger Print list - Search for Application -Select Group - click Search
Select and Export the application finger print

or check this:

Go to

1)Symantec Endpoint Manager - open

2)policies

3)firewall - click 

3) Add a firewall policy

4)click on firewall rules

5)customize the default sitting

6)Add rule - and do what ever you like to enable and disable

or check this:

Check following Articles:

Managing file fingerprint lists

http://www.symantec.com/docs/HOWTO55133

Configuring system lockdown

http://www.symantec.com/docs/HOWTO80848

Importing or merging file fingerprint lists in Symantec Endpoint Protection Manager

http://www.symantec.com/docs/HOWTO55138

How to configure System Lockdown to allow Microsoft Security Updates

http://www.symantec.com/docs/TECH103977

Also, check this Article:

https://www-secure.symantec.com/connect/articles/what-system-lockdown-what-stages-do-i-implement-system-lockdown-symantec-endpoint-protectio

and 

How to configure System Lockdown to allow Microsoft Security Updates

http://www.symantec.com/docs/TECH103977

Even though the Article was meant for SEP 11.x, the same Article would be assisting you with SEP 12.1 as well.

For the  Enable Whitelist Mode or Enable Blacklist Mode.

you have two option

First:

http://www.symantec.com/docs/HOWTO81094

Hi,

How I can get the fingerprint of Any USB as well as CD ROM drives?

Hi,

I just want to block all USB access except one USB ,and this only USB can access by all the system?

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection

http://www.symantec.com/docs/TECH106304

Check this thread

https://www-secure.symantec.com/connect/forums/block-usb-drives-0#comment-7321911

you use the ADC policy to allow/block Devices.

Thanks All,

I know how to block USB Drive through ADCP but my requirement is to allow only one USB to entire user? Apart from this USB if the user connects any other USB then it must get block by SEP?

Hi,

You can exclude device id for USB block policy.

You can retrive device ID for DevViewer tool.

DevViewer - a tool for finding hardware device ID for Device Blocking in Symantec Endpoint Protection

http://www.symantec.com/business/support/index?pag...

yes, the device id is specific to that device (USB).

Hi,

Yes,Device ID are same..