Endpoint Protection

 View Only

  • 1.  Sometime, wildchart does not work in Devices excluded from blocking

    Posted Aug 10, 2012 07:28 AM

    I want to block all USB devices except my usb-memory with device-ID: USBSTOR\DisktakeMS__USB_mini_________1100

     

    I have used "Device control" to block all USB devices. It works, message: The device was disabled successfully.

    I have setup my USB-memory for "Devices excluded from blocking" as follows:

    USBSTOR\Disk* It works, message: The device was enabled successfully.

    USBSTOR\Diskt* Does not work, message: The device was disabled successfully.

    USBSTOR\DisktakeMS__USB_mini_________1100 Does not work, message: The device was disabled successfully.

    Who can hept me to solve this issue?

     



  • 2.  RE: Sometime, wildchart does not work in Devices excluded from blocking

    Posted Aug 10, 2012 07:37 AM

    In SEP, wildcards are not supported

    How to Block or Allow Devices in Symantec Endpoint Protection

    http://www.symantec.com/business/support/index?page=content&id=TECH175220



  • 3.  RE: Sometime, wildchart does not work in Devices excluded from blocking

    Posted Aug 10, 2012 07:56 AM

    You are not correct: In SEP, wildcards are supported. Info in TECH175220:

    For Device IDs wildcards are supported: * and ?.

    • Asterisk [*] - means zero or more of any character
    • Question mark [?] - means a single character of any value


    Here are examples of using wildcards:

    Any USB Storage device

    • USBSTOR*

    Any USB Disk

    • USBSTOR\DISK*

    Any USB SanDisk drive

    • USBSTOR\DISK&VEN_SANDISK*

    Any USB SanDisk Micro Cruzer drive

    • USBSTOR\DISK&VEN_SANDISK&PROD_CRUZER_MICRO*

    A specific SanDisk device

    • USBSTOR\DISK&VEN_SANDISK&PROD_CRUZER_MICRO&REV_2033\0002071406&0

     



  • 4.  RE: Sometime, wildchart does not work in Devices excluded from blocking

    Posted Aug 10, 2012 08:11 AM

    Some word the deleted

    In SEP, wildcards are not supported on Class IDs.

     

     

    How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection

    http://www.symantec.com/business/support/index?page=content&id=TECH106304



  • 5.  RE: Sometime, wildchart does not work in Devices excluded from blocking

    Posted Aug 10, 2012 10:52 PM

    Check this one of artical it may be help

    How to block USB hard drives in SEP, but allow reading specific USB drives in the SEPM Application and Device Control Policy

    http://www.symantec.com/business/support/index?page=content&id=TECH173724



  • 6.  RE: Sometime, wildchart does not work in Devices excluded from blocking

    Posted Aug 15, 2012 04:52 AM

    I have read the TECH107304, TECH173724 and TECH175520 notes.

    According TECH175520 wildcards are allowed for Device IDs.

    For me, it does not work when a specify the whole device ID.

    For testing I used the wildcards:

    USBSTOR\Disk*        It works, message: The device was enabled successfully.

    USBSTOR\Diskt*       Does not work, message: The device was disabled successfully.

    USBSTOR\DisktakeMS__USB_mini_________1100        Does not work, message: The device was disabled successfully.