SEP started blocking USB Printers for no reason

[Kevin Still]

Under Device Control, we have Printing Devices excluded from Blocking. Randomly, SEP is blocking printers more and more. We have about 50 users with USB printers and everyday a few more of them are getting blocked.

They all have the exact same policies.

When I look at the logs, the devices that are blocked are showing as "Other". Any idea what's going on?

[Torsten Knorr]

hi, did you used the "CLASS_ID" or "Device_ID" within the policy?

"Class_ID" means, that all Device of this class will be allowed, recommended for Keyboard, Mouse and Printers.

What did the log shows you? Any USB/Class?

[Imtiaz Hussain]

Hi Kevin,
Please check windows build no
i face same issue, after upgrade windows issue resolve
please upgrade your windows with latest version and if you are using below
21H2 version better to use Microsoft update assistant tool to update latest
build version and check



On Thu, Jul 21, 2022 at 9:55 AM Torsten Knorr via Broadcom <
[e-mail]> wrote:

> hi, did you used the "CLASS_ID" or "Device_ID" within the policy?
> "Class_ID" means, that all Device of this class will be allowed,
> recommended...
> [image: Broadcom] <https: community.broadcom.com="">
> Endpoint Protection
> <https: community.broadcom.com/symantecenterprise/communities/community-home/digestviewer?communitykey="1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68">
> Post New Message <[e-mail]>
> Re: SEP started blocking USB Printers for no reason
> <https: community.broadcom.com/symantecenterprise/discussion/sep-started-blocking-usb-printers-for-no-reason#bm79e0a215-7b2a-4489-9d3d-c7801f99ad5e="">
> Reply to Group
> <[e-mail]?subject=re:+sep+started+blocking+usb+printers+for+no+reason> Reply
> to Sender
> <https: community.broadcom.com/symantecenterprise/communities/all-discussions/postreply?messagekey="79e0a215-7b2a-4489-9d3d-c7801f99ad5e&ListKey=09a5d7f3-db14-428a-b8b8-bcc0ea7cb156&SenderKey=8db40e86-9560-4920-a4b7-ee4f748e759b">
> [image: Torsten Knorr]
> <https: community.broadcom.com/network/members/profile?userkey="8db40e86-9560-4920-a4b7-ee4f748e759b">
> Jul 21, 2022 1:54 AM
> Torsten Knorr
> <https: community.broadcom.com/network/members/profile?userkey="8db40e86-9560-4920-a4b7-ee4f748e759b">
> hi, did you used the "CLASS_ID" or "Device_ID" within the policy?
>
> "Class_ID" means, that all Device of this class will be allowed,
> recommended for Keyboard, Mouse and Printers.
>
> What did the log shows you? Any USB/Class?
> *Reply to Group Online
> <https: community.broadcom.com/symantecenterprise/communities/all-discussions/postreply?messagekey="79e0a215-7b2a-4489-9d3d-c7801f99ad5e&ListKey=09a5d7f3-db14-428a-b8b8-bcc0ea7cb156">*
> *Reply to Group via Email
> <[e-mail]?subject=re:+sep+started+blocking+usb+printers+for+no+reason>*
> *View Thread
> <https: community.broadcom.com/symantecenterprise/discussion/sep-started-blocking-usb-printers-for-no-reason#bm79e0a215-7b2a-4489-9d3d-c7801f99ad5e="">*
> *Recommend
> <https: community.broadcom.com/symantecenterprise/discussion/sep-started-blocking-usb-printers-for-no-reason?cmd="rate&cmdarg=add#bm79e0a215-7b2a-4489-9d3d-c7801f99ad5e">*
> *Forward
> <https: community.broadcom.com/symantecenterprise/communities/all-discussions/forwardmessages?messagekey="79e0a215-7b2a-4489-9d3d-c7801f99ad5e&ListKey=09a5d7f3-db14-428a-b8b8-bcc0ea7cb156">*
> *Flag as Inappropriate
> <https: community.broadcom.com/symantecenterprise/discussion/sep-started-blocking-usb-printers-for-no-reason?markappropriate="79e0a215-7b2a-4489-9d3d-c7801f99ad5e#bm79e0a215-7b2a-4489-9d3d-c7801f99ad5e">*
>
> -------------------------------------------
> Original Message:
> Sent: Jul 20, 2022 12:11 PM
> From: Kevin Still
> Subject: SEP started blocking USB Printers for no reason
>
> Under Device Control, we have Printing Devices excluded from Blocking.
> Randomly, SEP is blocking printers more and more. We have about 50 users
> with USB printers and everyday a few more of them are getting blocked.
>
> They all have the exact same policies.
>
> When I look at the logs, the devices that are blocked are showing as
> "Other". Any idea what's going on?
>
>
>
> You are subscribed to "Endpoint Protection" as [e-mail]. To
> change your subscriptions, go to My Subscriptions
> <http: community.broadcom.com/preferences?section="Subscriptions">. To
> unsubscribe from this community discussion, go to Unsubscribe
> <http: community.broadcom.com/higherlogic/egroups/unsubscribe.aspx?userkey="d42a3a31-33f0-41ec-8a7e-1420d5798008&sKey=KeyRemoved&GroupKey=09a5d7f3-db14-428a-b8b8-bcc0ea7cb156">.
>
>
> Copyright © 2005-2022 Broadcom. All Rights Reserved. The term "Broadcom"
> refers to Broadcom Inc. and/or its subsidiaries.
>
> Hosted by Higher Logic, LLC on the behalf of Broadcom - Privacy Policy
> <https: www.broadcom.com/company/legal/privacy-policy=""> | Cookie Policy
> <https: www.higherlogic.com/legal/privacy=""> | Supply Chain Transparency
> <https: www.broadcom.com/company/citizenship/governance-and-ethics#supply="">
> | Terms of Use <http: termsandconditions="">
>