Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 0 subscribers
  • Views 5463 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

iMac Device Control - USB exemptions not working

TobiasK�llner

Hi all,

we have Endpoint Protection and enterprice console 5.3.1! We enabled device control and use exception policies for some usb devices. Most of our clients have Win 7 and are in Domain, which  is synchron with Active Directory.  Six Clients are iMacs with OS 10.11.1 El Capitan. They are not in our domain, so i created an own group in Sophos endpoint and gave the group an own policy. The problem now is => The policy is not in function. All USB Devices on the client are disabled and we immediately get an email

A device control event occurred on machine xxx-imac.local.
Use of controlled device type 'Removable Storage' has been disabled by the administrator.

We only have to ways: Open all devices with the standard policy, or DISABLE all devices with the "USB disable" policy. We can`t create exceptions. 
Do u have an idea ?
The exception Policy runs on Win7 clients without any problems



This thread was automatically locked due to age.
Parents
  • 0

    Hello TobiasK�llner (not sure what this �  should be),

    I've edited your subject to make it more specific.
    How did you add the exemptions? Guess the Model-/Device-IDs are platform specific - but you can easily check with (and create the necessary exemptions from) the Event Viewer: Take a device which should be blocked, plug it into a Windows machine and an iMac and note the details.

    Christian

Reply
  • 0

    Hello TobiasK�llner (not sure what this �  should be),

    I've edited your subject to make it more specific.
    How did you add the exemptions? Guess the Model-/Device-IDs are platform specific - but you can easily check with (and create the necessary exemptions from) the Event Viewer: Take a device which should be blocked, plug it into a Windows machine and an iMac and note the details.

    Christian

Children
No Data
Unfiltered HTML