USB removable scan scans entire directory instead of USB drive

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

When a USB drive is plugged in, Symantec Endpoint Protection (SEP) will scan the whole disk in the system instead of just the USB mounted drive.

Cause

The /ScanDrive parameter specifies a scan of only removable drive.
However, the /ScanTemplate "Removable Media Scan Options" is configured by default to scan all drives (Default policy from Cloud). Consequently, the instruction to scan only removable drive is being overridden by the template's instruction to scan all drives.

Resolution

This issue is fixed in SEP 14.4 version.

No workaround available for older builds.