Workstation IT-based Security Best Practice Configurations

see:http://www.symantec.com/business/support/index?page=content&id=TECH166816&actp=search&viewlocale=en_US&searchid=1341293374708

http://www.symantec.com/connect/forums/sep11-application-device-control-sd-card-storage 

 

Best Practices for Deploying Symantec Endpoint Protection's Application and Device Control Policies

http://www.symantec.com/docs/TECH145973

 

How to block USB devices while excluding mouse and keyboard?

http://www.symantec.com/docs/TECH161779

 

How to block USB Thumb Drives and USB Hard Drives, but allow specific USB Drives in the Application and Device Control Policy in Symantec Endpoint Protection.

http://www.symantec.com/docs/TECH106304

 

Known Limitations of ADC

In SEP 11, Application and Device Control functions only on 32-bit Operating Systems.  ADC is not possible on 64-bit computers.ADC cannot block burning to CD/DVD drives, though a workaround may be possible.ADC cannot block files accessed via NetBIOS.ADC shares drivers with Network Threat Protection, SEP's firewall component.  ADC will only function if the NTP component is also installed