Endpoint Protection

 View Only

  • 1.  How to alert on USB devices being plugged in

    Posted Oct 18, 2018 09:00 AM

    Can SEP / SEPM be configured in such a way as to be able to report on when USB devices get plugged on so that administrators get an e-mail?

    We are having major issues with data exfiltration and need to monitor USB storage usage.



  • 2.  RE: How to alert on USB devices being plugged in

    Posted Oct 18, 2018 09:14 AM

    Yeah, although, DLP is better suited for this.

    In the Application Control policy there is a rule to make all USB drives read-only. You can flip this to make them writeable if you wish to only monitor usage. Just make sure you enable all logging on the Actions tab.