The DLP Endpoint Agent cannot block reads from removable devices

book

Article ID: 160759

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

You need to block all reads from removable devices, such as USB drives, and you need to know whether the DLP Endpoint Agent is able to do this.

Resolution

The DLP product does not currently block reads from removable devices. It can be configured to block writes to devices if a policy is violated.

Symantec recommends using the Symantec Endpoint Protection (SEP) Application Device Control feature if you need control over reads from removable drives.