Workstation ITbased Security Best Practice Configurations

see:http://www.symantec.com/business/support/index?page=content&id=TECH166816&actp=search&viewlocale=en_US&searchid=1341293374708

http://www.symantec.com/connect/forums/sep11-application-device-control-sd-card-storage 

 

Best Practices for Deploying Symantec Endpoint Protection's Application and Device Control Policies

http://www.symantec.com/docs/TECH145973

 

How to block USB devices while excluding mouse and keyboard?

http://www.symantec.com/docs/TECH161779

 

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://www.symantec.com/docs/TECH106304

 

Known Limitations of ADC

1. In SEP 11, Application and Device Control functions only on 32-bit Operating Systems.  ADC is not possible on 64-bit computers.
2. ADC cannot block burning to CD/DVD drives, though a workaround may be possible.
3. ADC cannot block files accessed via NetBIOS.
4. ADC shares drivers with Network Threat Protection, SEP's firewall component.  ADC will only function if the NTP component is also installed