Endpoint Protection

Hi all,

I have about 2500 PC's at my work, and all of them have a SEP client 11.0.6.2 . I have to block or disable the internet usb dongle only during working hours.

Is it applicable to do such task via  symantec manager like firewall rule, applications,or devices  ?

Please help ASAP.

Thanks

Unfortunately you cannot schedule a "Block or Allow" policy for blocking USB drives. You can create location based policies, but not time based.

ok, how can I do it?

try this document

http://www.symantec.com/business/support/index?page=content&id=TECH104299&locale=en_US

I have another question.

is a firewall rule saved on client and is it works when it disconnected form the network. (when I go to home)

You need to create a location policy for that.

https://www-secure.symantec.com/connect/forums/provide-me-documentation-creating-location-and-location-specific-policies

to over come the above question (disable usb dongle during working hour), I suggest the following,

use the FW rule to enable all subnets I needed at my LAN on my work and disable the other and control it with a time as I needed.

then assign this policy to specific group.

is it correct ?

yes, policy needs to be applied to groups, in case if you are using the location use the policy for that.