The DLP Endpoint Agent cannot block reads from removable devices
book
Article ID: 160759
calendar_today
Updated On:
Products
Data Loss Prevention Endpoint Prevent
Issue/Introduction
You need to block all reads from removable devices, such as USB drives, and you need to know whether the DLP Endpoint Agent is able to do this.
Resolution
The DLP product does not currently block reads from removable devices. It can be configured to block writes to devices if a policy is violated.
Symantec recommends using the Symantec Endpoint Protection (SEP) Application Device Control feature if you need control over reads from removable drives.