Endpoint Protection

I'd like to share some problem that I have in the company that I work. We have installed Endpoint protection (12.1.1.1101.401 RU1 MP1) in 200 computers located in 2 sites (two cities). Everything works fine, except that I want to block usb storage to the computers. I made a policy for that and works fine for the computers in my first site (both windows xp and 7 OS), but in the second site the policy only works for windows 7 computers. The policy is the same for both sites. I've also tried to add USBSTOR* in device ID to block, but it still works only for windows 7 computers. Can someone give an advice?

have the policy been updated to clients?

did you try restarting the client after the policy updated?

HI,

What SEP feature Installed in SEP client ?

Kindly Verify SEP client policy no and SEP group policy no are same ?

How to block or allow device's in Symantec Endpoint Protection

http://www.symantec.com/connect/articles/how-block-or-allow-devices-symantec-endpoint-protection

in SEP client we have Virus and Spyware protection, proactive threat protection and network thread protection enabled. 

I have tried to block every usb device, usb, mice, etc but doesn't work for windows xp.

I'm sure that I have updated the policy in client and restarted the computer.

How can I find the policy No from the client? I can see the policy No for the client from the server.

Please note that in our computers we had some other endpoint protection version that didn't have any options for device blocking - but we bought the version that has that ability and upgraded all computers with that one (unistalled old version and installed new one). 

 HI,

Check Help and support -> Troubleshooting

Thank you. Yes, it's the same policy serial no. I'll try manually to export the policy from a working xp computer, to a non working one and see what happens. Any other ideas?

HI,

Try to Open any to any firewall port sep client to SEPM ?

I've disabled both sep firewall and windows firewall in a client that I'm testing (updated policy) but still usb is not blocked

hi,

Try to export new client package and install one client check may be help.

If not help please raised support ticket..

Please contact Symantec Technical Support via the support phone numbers listed below

Regional Support Telephone Numbers:
United States: https://support.broadcom.com (407-357-7600 from outside the United States)
Australia: 1300 365510 (+61 2 8220 7111 from outside Australia)
United Kingdom: +44 (0) 870 606 6000
Additional contact numbers: http://www.symantec.com/business/support/contact_techsupp_static.jsp   India: Toll-Free 000 800 4401 456 directly                                                                                                       

Contact Symantec Customer Care on 

http://www.symantec.com/support/assistance_care.jsp

OR 

Technical Support

http://www.symantec.com/business/support/contact_techsupp_static.jsp

ok fixed it. I pushed a new version of the client to the computers and changed the policy to block all deviceIDs starting with USBSTOR*

HI,

Good to Hear your problem are resolved after Pushed new SEP client Package :)