Endpoint Protection

 View Only
Expand all | Collapse all

How to see written activity on USB drive?

Jump to Best Answer
  • 1.  How to see written activity on USB drive?

    Broadcom Employee
    Posted Aug 03, 2009 03:04 AM
    Dear all,

    How can I find out that are the files written on USB Drive?

    Warm regards,

    Sumit Bose


  • 2.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Aug 03, 2009 03:12 AM
    Are u talking about the Log or the content of the USb drive??? I am not quite clear with ur query, please elaborate it

    Ajit


  • 3.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Aug 03, 2009 03:12 AM
    Under Application & device control policy you can select the option for " "Log files written to USB drives."

    The logs can viewed under

    Logs can be viewed in SEP client console under View Logs menu > Client Management > Control Log...
    Logs can be viewed in SEP Manager under Monitors menu > Logs tab - Log Type: Application and Device Control, Log Content: Application Control - Select View Log


    Please mark this as a solution ito this thread if this works.:)


  • 4.  RE: How to see written activity on USB drive?
    Best Answer

    Broadcom Employee
    Posted Aug 03, 2009 04:13 AM
    One thing i want to add here

    when u configure this policy use wildcard *
    so that all process will come in logs.

    Thank you


  • 5.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Aug 03, 2009 07:38 AM

    Thank you kavin, i think it's correct procedure to see logs files.


    @Ajitjha If user copy any data from the PC to USB, N/w, CD,DVD,Floppy, SEP will trace the location of files.


    Hope u understand!


    regards,
    Ajeet Kumar



  • 6.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Aug 04, 2009 02:40 AM
    Dear all,

    Thanks for the responce.

    Kavin your suggestion is the correct one but i woluld like to mark the sulotion to Ajeet as using wildcard it works more efficntly


    Warm regards.
    Sumit Bose


  • 7.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Aug 04, 2009 02:49 AM
    No Problem Sumit I am happy you got the solution.


  • 8.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Sep 04, 2009 08:32 AM
    Hi,

    Where is the option to Log files written to USB drives , I cannot see it anywhere ??

    Thanks


  • 9.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Sep 05, 2009 02:42 PM
    To check logs click on monitor-logs-application & device control


  • 10.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Sep 15, 2009 08:12 AM
    Hi , I know where th check the logs , I just can't see any option to select "Log Files written to USB Drives" .... in the Application | Device Control Policy


  • 11.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Jan 28, 2010 05:47 PM
    i have one policy which blocks USB devices, and second policy which logs all activities written to USB devices (for those users who has right to use usb device).

    in the second policy:
     
    1."marked  "Log files written to USB drives" option
    2. assigned to those groups of users, who has right to use USB devices.

    when i wanted to see logs of those users who transferred some files on USB, i received output (see below)...


    there was said that more effective way for logging, will be use of wildcards *,:

    Question:
    Exaclty where i have to add this wildcard in policy?


    777.jpg


  • 12.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Jan 28, 2010 05:52 PM
    There is no way to search by rule name...I have put in the suggestion back during the original release of SEP 11...still don't see the functionality....


  • 13.  RE: How to see written activity on USB drive?

    Broadcom Employee
    Posted Apr 09, 2010 10:46 AM