search cancel

USB drives accessible after boot despite Device Control

book

Article ID: 172813

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

You are using Device Control on Symantec Endpoint Protection (SEP) for Mac to block USB devices, but they are still available briefly (for about one minute) after boot. After a minute or so, they are blocked even if already plugged in.

Cause

This is by design. Device Control policies do not take effect until after SymDaemon is loaded.

Environment

Apple macOS

Resolution

If you wish, you may submit an enhancement request to our engineers. For instructions on how to do this, please see Submit a suggestion for Symantec products.