Endpoint Protection Cloud (SEPC) Account Administrator or SEPC Administrator needs to change the Security Policy to either block USB devices, or set them to Read Only.
SEPC can be configured to block USB Mass Storage devices (USBSTOR). Other USB devices will still be allowed, including USB attached SCSI (UAS) storage devices.
Login to your SEPC console.
Go to Policies>Security Policy>Connected Storage Devices
The policy can be configure to Read/Write, Read Only, or Block.
Note : this feature is only supported on Windows devices.