USB removable scan scans entire directory instead of USB drive

Products

• Endpoint Security
• Endpoint Security Complete

Issue/Introduction

When a USB drive is plugged in, Symantec Endpoint Security (SES) agent will scan the whole disk in the system instead of just the USB mounted drive.

Environment

• SES Windows agent 14.3.x (Cloud managed)

Cause

The /ScanDrive parameter specifies a scan of only removable drive.
However, the /ScanTemplate "Removable Media Scan Options" is configured by default to scan all drives (Default policy from Cloud). Consequently, the instruction to scan only removable drive is being overridden by the template's instruction to scan all drives.

Resolution

This issue is fixed in Symantec Endpoint Protection 14.4.  For information on how to obtain the latest build of Symantec Endpoint Protection, see Download Symantec Enterprise Security software, tools, and patches.

No workaround available for older builds.

Additional Information

CRE-21789