Endpoint Protection

 View Only
  • 1.  USB Autoscan in SEP!

    Posted Jan 17, 2018 09:05 AM

    Hi,

    Is there solution for Autoscan USB pendrive or external HDD at point of mount?

    Thanks,



  • 2.  RE: USB Autoscan in SEP!

    Posted Jan 17, 2018 09:07 AM

    This is Symantec's reponse to it:

    http://www.symantec.com/docs/TECH102573

    This has always been the case.



  • 3.  RE: USB Autoscan in SEP!

    Posted Jan 17, 2018 09:37 AM

    Thanks ℬrίαη,

    As given link have line as follows:-

    "Symantec Antivirus does not currently run an automatic System Scan on the contents of flash drives when they are first plugged in. A manual scan on the contents of a flash drive can be initiated by right-clicking on the drive in My Computer and choosing Scan for Viruses."

    Question is, is there any 'workaround' or cheetcode(as gamer guys use) for make policy for Scan on the contents of flash drives when they are first plugged in?



  • 4.  RE: USB Autoscan in SEP!

    Posted Jan 17, 2018 09:39 AM

    An HI policy was created awhile back:

    https://www.symantec.com/connect/forums/hi-policy-symantec-scanning-usb-when-it-plugin

    So I guess test it out and see how it works for you.

     



  • 5.  RE: USB Autoscan in SEP!

    Posted Jan 17, 2018 10:40 AM

    I would strongly advise against scanning USB drives when they are connected. It might sound like a good idea, but does nothing both add performance bottlenecks and slows down your computer and external drive.

    Keep in mind that SEP autoprotect by default will scan any file on the USB drive if the file is opened, copied, moved or previewed.
    So if there is malware on the USB drive that would harm the computer, it will get detected once executed. You don't need to perform a prescan to be protected against malware on USB drives.

    By performing a scan you might find dorment malware laying in subfolders of the USB drives, but the same file would have been detected the moment someone clicks on it. Scanning a large USB drives may take hours and slow down the I/O to that drive drastically.

    The only use case for this scenario is if your planning to use SEP as a malware scanning station for USB drives before they are allowed to connect to another unprotected system, but then you might as well right click the drive and start a manual scan.