Just got a weird one regarding Sophos Central on Windows 10 1909. We can see USB removable devices in the peripheral control to allow or block but not DVD drives.
Is there anyway for it to appear in the event log that its connected so we can allow this drive we need?
Hi Mark Robins
In Windows Explorer, does the CD-ROM device listed under the Devices and drives section of This PC as mentioned here.
Yes the DVD drive does appear in device manager and says it is working correctly.
However Sophos Endpoint Cloud does not see this device as an event therefore we can't allow write permissions. If we disable the tamper protection and turn off peripheral control we can do so but this is not a solution for the end user.
We are running 10.8.9.2 of the endpoint agent if that makes any difference.
Could you please check under C:\ProgramData\Sophos\Sophos Device Control\logs if you see any specific events?
No we get nothing appearing in the logs but it does appear in Device Manager.