Endpoint Protection

  • Private Community
 View Only

  • 1.  Scan USB flash drives on connect

    Posted Dec 16, 2009 01:45 PM
    Hello all,

    I recently was made the administrator for the Symantec Endpoint Protection server and I noticed that the client that was made does not prompt or automatically scan USB flash drives when they are connected to the computer. I know several products on the market has this capability like Kaspersky but can this be configured on SEP? We are in a huge corporate environment where flash drives are used interchangably and I would love to at least present a option to scan them once they are plugged in. I see about 3-4 flash drive infections or computers infected by flash drives every 2 weeks. Thanks in advance.

    Regards,
    Keith


  • 2.  RE: Scan USB flash drives on connect

    Posted Dec 16, 2009 01:55 PM
    Please refer to the following KB

    Does Symantec Endpoint Protection or Symantec Antivirus Scan USB flash drives? 
    http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/2fbd3187178c4d488825736a006540f9?OpenDocument

    Thomas




  • 3.  RE: Scan USB flash drives on connect

    Posted Dec 16, 2009 02:00 PM
    That answers my question perfectly. Thank you and I hope Symantec thinks about implementing an automatic scan or at least present the option to on the drives in the future.


  • 4.  RE: Scan USB flash drives on connect

    Posted Dec 16, 2009 02:17 PM
     Two things to note..

    1.  disable autorun via GPO and in SEP.  Infections come in when drives are inserted and it's autorun...
    2.  Auto-protect has saved me plenty of times, and a full scan upon insertion was never needed.


  • 5.  RE: Scan USB flash drives on connect

    Posted Dec 16, 2009 02:35 PM
    I can't speak for the Group Policy as I have no authority in that realm but where would I disable autorun in SEP? I know that's where the infections come from which is why I wanted to scan first or present the option to scan.

    Auto-protect on just Symantec AV 10 is terrible, flash drives are able to infect computers at will right now until I deploy SEP to all of the computers.


  • 6.  RE: Scan USB flash drives on connect

    Posted Dec 17, 2009 01:52 AM
    Information and disabling autorun and how to protect against viruses that spread via autorun
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008032111570648

    How to prevent autorun with SEP's application and device control
    http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008050910464348

    I think these two articles are exactly what you are looking for. Hope they help

    Grant-