Endpoint Protection

 View Only
Expand all | Collapse all

USBDeviceBlock

Migration User

Migration UserDec 31, 2012 12:43 AM

Migration User

Migration UserDec 31, 2012 02:08 AM

Migration User

Migration UserDec 31, 2012 02:13 AM

  • 1.  USBDeviceBlock

    Posted Dec 31, 2012 12:39 AM

    Hi

    We have SEP 11.7 and we have device block policy we are blocking USB devices on SEP clients, now it is working fine on XP windows that all type of USB devices USB hard disk or USB stick is blocking, But on Windows 2008 this device block policy is not working we can connect USB hard disk on Windows 2008 why it is not block on Windows 2008

    Thanks

     

     



  • 2.  RE: USBDeviceBlock

    Posted Dec 31, 2012 12:43 AM

    HI,

    What sep componets installed in Server ?



  • 3.  RE: USBDeviceBlock

    Posted Dec 31, 2012 12:52 AM

    all the Clients either user PC and Server have same SEP client configuration

    SEP client has all three componets Virus and Spyware Protection, Proactive Threat Protection and Netowrk Threat Protection.

    Thanks



  • 4.  RE: USBDeviceBlock

    Posted Dec 31, 2012 12:59 AM

     

    Hi,

    Are the usb blocked policy pplied (Scheck policy serial no )?

    Can you restart the server after apply policy ?



  • 5.  RE: USBDeviceBlock

    Posted Dec 31, 2012 01:02 AM

    Hi

    We have restarted server but same issue, how to check policy serial number

    and confirm that USB blocked policy applined on server

    Thanks

     

     



  • 6.  RE: USBDeviceBlock

    Posted Dec 31, 2012 01:09 AM

    HI,

    Check on SEP client GUI

    SEP Client GUI ->Troubleshooting ->Management ->Policy Serial no.    (SEP client)

    SEPM Console -> Client ->Sepcify Client Group ->Policies ->

     

     

    Checking the policy serial number on a client

    Article:HOWTO55604  |  Created: 2011-06-30  |  Updated: 2011-11-17  |  Article URL http://www.symantec.com/docs/HOWTO55604
     

     



  • 7.  RE: USBDeviceBlock

    Posted Dec 31, 2012 01:25 AM

    Hi

    I got the Policy number on client as you mentioned

    SEP Client GUI ->Troubleshooting ->Management ->Policy Serial no

    But I did not got policy number on SEP server from SEPM console

    I have differents group for different client and policy is there how should know the policy number of SEP server to match this policy on client

     

    Thanks

     

     

     



  • 8.  RE: USBDeviceBlock

    Posted Dec 31, 2012 01:25 AM

     

    Hi,

    It's 64 bit OS?

     

    SEP 11 Ru 7 the version you using is not compatible for ADC policy to run on 64 bit machine

    you need to install SEP 12.1 if you want to be able to use Application and Device Control module. Please refer to the article below:

    http://www.symantec.com/docs/TECH102267

     



  • 9.  RE: USBDeviceBlock

    Posted Dec 31, 2012 01:45 AM

    Hi

    Can you tell me the steps how should I find a policy number from SEPM console for client group

    I go how to find on client

    Thanks

     



  • 10.  RE: USBDeviceBlock

    Posted Dec 31, 2012 01:49 AM

    hi,

    Check On SEPM console.

    Login SEPM Console ->Client-> Select SEP client Group(Where SEP client available) ->Policies



  • 11.  RE: USBDeviceBlock

    Posted Dec 31, 2012 02:00 AM
      |   view attached

    Hi

    I am following the same path as you mentioned but I did not find any serial number

    I am attching screen shot of SEPM console

    Thanks

     

     



  • 12.  RE: USBDeviceBlock

    Posted Dec 31, 2012 02:08 AM

    HI,

    It's replication server ?



  • 13.  RE: USBDeviceBlock

    Posted Dec 31, 2012 02:13 AM

    Hi

    No

     



  • 14.  RE: USBDeviceBlock

    Posted Dec 31, 2012 02:16 AM

    HI,

    Check all other group policy no showing aur not ?



  • 15.  RE: USBDeviceBlock

    Posted Dec 31, 2012 03:38 AM
    Hi, SEP 11 Ru 7 the version you using is not compatible for Application and device control policy to run on 64 bit machine. upgrades it to 12.1.X.. I am sure your problem will resolve with the new version.


  • 16.  RE: USBDeviceBlock

    Posted Dec 31, 2012 03:54 AM

    Hi

    all group of client does not show serial number, is there anything wrong

    Thanks

     



  • 17.  RE: USBDeviceBlock

    Posted Dec 31, 2012 04:07 AM

    Hi,

    Try to create new SEPM group and check policy serial no apper or not ?

    If not conect to symantec support

     

    Policy serial numbers do not get updated/created unless the SEPM service is restarted

    Article:TECH173941  |  Created: 2011-11-09  |  Updated: 2012-09-20  |  Article URL http://www.symantec.com/docs/TECH173941
     

     



  • 18.  RE: USBDeviceBlock

    Broadcom Employee
    Posted Jan 01, 2013 06:01 AM

    Hi,

    Go through the attached screenshot to compare SEPM and SEP client serial number.

    Screenshot is taken from SEPM 11.x version.

    As everyone stated in SEP 11.x, ADC policy is not applicable on 64bit opearating systems.

    Application and Device Control policies in Symantec Endpoint Protection 11.0 are not applied to 64 bit clients

    http://www.symantec.com/docs/TECH102267

    Tamper Protection does not install on a 64-bit Operating System.

    http://www.symantec.com/business/support/index?page=content&id=TECH105052

    About Endpoint Protection support for Windows 7 and Windows Server 2008 R2

    http://www.symantec.com/business/support/index?page=content&id=TECH94910

     

     



  • 19.  RE: USBDeviceBlock

    Posted Jan 01, 2013 09:31 AM
    Hi Golani, Kindly confirm what is the current running version of WSEPM in your n/w? If it is 11.x then the policy will not be applied because ADC policy is not applied on 64 bit in 11.x version. Symantec Endpoint Protection 11.0 compatibility with 64-bit platform http://www.symantec.com/business/support/index?page=content&id=TECH102143&locale=en_US Policy applied only on 12.x version. If you required to applied the USB policy then upgrade the version in 12.x


  • 20.  RE: USBDeviceBlock

    Broadcom Employee
    Posted Jan 10, 2013 01:58 AM

    Hi,

    Could you please update this thread?

    If issue is resolved then don't forget to mark your thread as 'SOLVED' with the answer that best helps you.



  • 21.  RE: USBDeviceBlock

    Posted Jan 23, 2013 04:57 AM

     

    We have not recieved any revert on same from long time, hopefully your query has been closed. If your issue closed then please mark valid comment as a solution which can help to other.

    Thanks



  • 22.  RE: USBDeviceBlock

    Posted Jan 23, 2013 09:08 AM

    As said, SEP 11 does not support 64bit OS for application and device control.

    You need 12.1



  • 23.  RE: USBDeviceBlock

    Posted Jan 23, 2013 10:03 PM
    SEP 11.X is not supporting 64bit OS for application and device control policy. please use 12.X version.. it support 32 & 64 bit both OS for application and device control policy.


  • 24.  RE: USBDeviceBlock

    Posted Jan 24, 2013 02:15 AM

     

    Upgrade your current version in 12.1 RU2

    https://www-secure.symantec.com/connect/articles/whats-new-sep-121-ru2



  • 25.  RE: USBDeviceBlock

    Posted Jan 30, 2013 12:27 AM
    kindly update your thread and if issue is close then mark as a solution which help you.