Block USB with Symantec

Block USB with Symantec

A popular vector for malware is USB drives. Here’s an easy way to use Symantec Endpoint Protection in the Enterprise to block USB drives.

First step is to create a Policy:

-Choose Application and Device Control



-Choose Device Control

-Add USB Device under Blocked Devices

-Choose Human Interface Devices under ‘Devices Excluded From Blocking’ so that USB keyboards and mice will still be allowed

-check Notify Users and add a cutom Notification Message


-Assign the Policy to the applicable groups


Whenever a user inserts a USB drive, they will be presented with the custom message, and they will not be able to use the USB drive:






You Might Also Like


Leave a Reply

Your email address will not be published. Required fields are marked *