Endpoint Protection

Hello guys,

In SEPM ,is there is any option for when we plug the USB in SEPM install machine,it automatically scan the USB and detected the Virus. like other Antivirus maceffe,nortan

The File System Auto-Protect scan is the only type which would automatically scan a USB drive connected to the system. This type of scan, by default, would only run when a file is accessed or modified (scans the files when they are written, opened, moved, copied, or run).

This means that if any infections/threats present on the USB drive attempt to access or modify any of the content on the system, it would be detected. The detection mechanism within File System Auto-Protect ensures safety from threats present on the USB drives.

Symantec Antivirus does not currently run an automatic System Scan on the contents of flash drives when they are first plugged in. A manual scan on the contents of a flash drive can be initiated by right-clicking on the drive in My Computer and choosing Scan for Viruses

Does Symantec Endpoint Protection or Symantec Antivirus Scan USB flash drives?

See this IDEA

Option to 'Auto-Scan' new USB mass storage devices when connected

https://www-secure.symantec.com/connect/idea/option-auto-scan-new-usb-mass-storage-devices-when-connected

AutoProtect will scan and protect any mounted file systems on computers running Symantec Antivirus. This does include USB flash drives. Symantec Antivirus does not currently run an automatic scan on the contents of flash drives when they are first plugged in. A manual scan on the contents of a flash drive can be initiated by right-clicking on the drive in My Computer and choosing Scan for Viruses...

Does Symantec Endpoint Protection or Symantec Antivirus Scan USB flash drives?

http://www.symantec.com/docs/TECH102573

Does Symantec Endpoint Protection scan the boot sector of USB drives?

http://www.symantec.com/docs/HOWTO77612

Check the comment of mithun as well

https://www-secure.symantec.com/connect/forums/does-symantec-endpoint-protection-scan-pendrive-automatically#comment-11064151

Nope this is not possible for SEP to scan once a USB is plugged. Auto-Protect will detect malware if it tries to execute from a USB.

You can create an application and device control policy to not allow executable to run from USB or make USBs read-only.

This feature is currently offered with Norton products only for end user customers. For enterprise users there isn't any such option available in the SEPM console.