Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

USBDeviceBlock

Created: 30 Dec 2012 | 24 comments

Hi

We have SEP 11.7 and we have device block policy we are blocking USB devices on SEP clients, now it is working fine on XP windows that all type of USB devices USB hard disk or USB stick is blocking, But on Windows 2008 this device block policy is not working we can connect USB hard disk on Windows 2008 why it is not block on Windows 2008

Thanks

Comments 24 CommentsJump to latest comment

Ashish-Sharma's picture

HI,

What sep componets installed in Server ?

Thanks In Advance

Ashish Sharma

Golani's picture

all the Clients either user PC and Server have same SEP client configuration

SEP client has all three componets Virus and Spyware Protection, Proactive Threat Protection and Netowrk Threat Protection.

Thanks

Ashish-Sharma's picture

Hi,

Are the usb blocked policy pplied (Scheck policy serial no )?

Can you restart the server after apply policy ?

Thanks In Advance

Ashish Sharma

Golani's picture

Hi

We have restarted server but same issue, how to check policy serial number

and confirm that USB blocked policy applined on server

Thanks

Ashish-Sharma's picture

HI,

Check on SEP client GUI

SEP Client GUI ->Troubleshooting ->Management ->Policy Serial no.    (SEP client)

SEPM Console -> Client ->Sepcify Client Group ->Policies ->

Checking the policy serial number on a client

Article:HOWTO55604  |  Created: 2011-06-30  |  Updated: 2011-11-17  |  Article URL http://www.symantec.com/docs/HOWTO55604
 

Thanks In Advance

Ashish Sharma

Golani's picture

Hi

I got the Policy number on client as you mentioned

SEP Client GUI ->Troubleshooting ->Management ->Policy Serial no

But I did not got policy number on SEP server from SEPM console

I have differents group for different client and policy is there how should know the policy number of SEP server to match this policy on client

Thanks

Ashish-Sharma's picture

Hi,

It's 64 bit OS?

SEP 11 Ru 7 the version you using is not compatible for ADC policy to run on 64 bit machine

you need to install SEP 12.1 if you want to be able to use Application and Device Control module. Please refer to the article below:

http://www.symantec.com/docs/TECH102267

Thanks In Advance

Ashish Sharma

Golani's picture

Hi

Can you tell me the steps how should I find a policy number from SEPM console for client group

I go how to find on client

Thanks

Ashish-Sharma's picture

hi,

Check On SEPM console.

Login SEPM Console ->Client-> Select SEP client Group(Where SEP client available) ->Policies

Thanks In Advance

Ashish Sharma

Golani's picture

Hi

I am following the same path as you mentioned but I did not find any serial number

I am attching screen shot of SEPM console

Thanks

Screen1.jpg
Ashish-Sharma's picture

HI,

It's replication server ?

Thanks In Advance

Ashish Sharma

Ashish-Sharma's picture

HI,

Check all other group policy no showing aur not ?

Thanks In Advance

Ashish Sharma

Dilippatel's picture

Hi,

SEP 11 Ru 7 the version you using is not compatible for Application and device control policy to run on 64 bit machine.

upgrades it to 12.1.X.. I am sure your problem will resolve with the new version.

Golani's picture

Hi

all group of client does not show serial number, is there anything wrong

Thanks

Ashish-Sharma's picture

Hi,

Try to create new SEPM group and check policy serial no apper or not ?

If not conect to symantec support

Policy serial numbers do not get updated/created unless the SEPM service is restarted

Article:TECH173941  |  Created: 2011-11-09  |  Updated: 2012-09-20  |  Article URL http://www.symantec.com/docs/TECH173941
 

Thanks In Advance

Ashish Sharma

Chetan Savade's picture

Hi,

Go through the attached screenshot to compare SEPM and SEP client serial number.

Screenshot is taken from SEPM 11.x version.

As everyone stated in SEP 11.x, ADC policy is not applicable on 64bit opearating systems.

Application and Device Control policies in Symantec Endpoint Protection 11.0 are not applied to 64 bit clients

http://www.symantec.com/docs/TECH102267

Tamper Protection does not install on a 64-bit Operating System.

http://www.symantec.com/business/support/index?page=content&id=TECH105052

About Endpoint Protection support for Windows 7 and Windows Server 2008 R2

http://www.symantec.com/business/support/index?page=content&id=TECH94910

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

rs_cert's picture

Hi Golani,
Kindly confirm what is the current running version of WSEPM in your n/w?

If it is 11.x then the policy will not be applied because ADC policy is not applied on 64 bit in 11.x version.

Symantec Endpoint Protection 11.0 compatibility with 64-bit platform
http://www.symantec.com/business/support/index?pag...
Policy applied only on 12.x version. If you required to applied the USB policy then upgrade the version in 12.x

Chetan Savade's picture

Hi,

Could you please update this thread?

If issue is resolved then don't forget to mark your thread as 'SOLVED' with the answer that best helps you.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

rs_cert's picture

We have not recieved any revert on same from long time, hopefully your query has been closed. If your issue closed then please mark valid comment as a solution which can help to other.

Thanks

diabolicus23's picture

As said, SEP 11 does not support 64bit OS for application and device control.

You need 12.1

Dilippatel's picture

SEP 11.X is not supporting 64bit OS for application and device control policy.
please use 12.X version.. it support 32 & 64 bit both OS for application and device control policy.

Sumit G's picture

kindly update your thread and if issue is close then mark as a solution which help you.

Regards

Sumit G.