Endpoint Protection

 View Only
  • 1.  block burning cd

    Broadcom Employee
    Posted May 02, 2009 11:20 AM
    HI,
    I would like to hear from the community if blocking writing to cd/dvd can be configured? Please share the configuration details.

    Cheers!!
    Pete


  • 2.  RE: block burning cd
    Best Answer

    Broadcom Employee
    Posted May 02, 2009 11:36 AM
    sorry guys, hadn't checked the KB

    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008042510214848

    writing cd/dvd not possible using SEP.

    Pete!


  • 3.  RE: block burning cd

    Posted May 03, 2009 08:17 AM
    Hope they get a fix on this soon. . Although USB is the most common means to transfer files today, The culprits might know the loop hole and start copying files from the CD where it is not logged for ownership.


  • 4.  RE: block burning cd

    Posted May 04, 2009 12:23 AM
    There is no need to fix this as This is an ativirus product not a group policy management server.


  • 5.  RE: block burning cd

    Posted May 21, 2009 05:17 PM
    Bijay,

    Actually SEP is marketed as having device and application control, which also has built in features to disable writing to removable devices (CD/DVD ROM drives being an option)...so your condecending comments are not appreciated. 

    And I would also like to second the request that Symantec fix this for DVD/CD-ROMS as it is a loophole in endpoint security.  I basically have to disable all CD-ROM functionality or physically make sure there are no R/RW drives in my workstations to block them from writing.


  • 6.  RE: block burning cd

    Posted May 22, 2009 02:36 PM
    As I recall from my initial testing, SEP would block CD writing if the Windows CD burning routines were used.  It did not block CD burning from the third-party software that is being bundled with many PC's such as easy cd creator.  You could probably address this with the application control functions.  There are other non-symantec device control applications that do a better job of this and work with 64-bit OS's.  These device control programs also try to keep up with newer versions of CD/DVD writing programs as they are released. This is an area that needs to be improved.


  • 7.  RE: block burning cd

    Posted May 22, 2009 07:22 PM
    Another option, although not necessarily one that seems practical in my opinion, is to have device control block all 3rd party burning application ie)Nero, Easy Cd Creator ex. Then you can use Windows to Widows security policy to block Windows from burning to CD/DVD drives. This effectively is stopping all burning to any cd drives, no? Well like I said maybe not the most practical solution, but since optical drives use unique drivers and API's it is very difficult to block access to them. Hopefully sometime in the future.

    Cheers
    Grant



  • 8.  RE: block burning cd

    Posted May 25, 2009 09:50 PM
    @Grant_Hall: that is what we are doing to prevent CD burning...
    just sometimes we need to be vigilant if the clients would use another 3rd party apps...
    it might be a long list...
    thanks.