Jump to content

Report on USB device blocking not showing data


rthompson
 Share

Recommended Posts

Hi all,

I have set the built in policy 'Device Control Maximum Security' to block any usb device a user connects. I want this blocking to be reported back to the cloud console so we can unblock devices as required.

Within the policy, logging severity is set to 'Always'.

In Reports > Computers > New Report Template, I've setup a new report titled 'USB Blocking Report'.

I've set all required columns (serial/device/manufacturer etc.),

However, when the report is generated it is blank.

Where am I going wrong?

 

Many thanks!

Link to comment
Share on other sites

2 minutes ago, Marcos said:

Please try changing the severity to warning or Informational.

Thanks for the info.

I've  tried every option there with no result

 

Link to comment
Share on other sites

  • ESET Staff

Please note, that you have to verify it in a way, that you set the severity to "warning", then connect the device. It will not work "backwards", only forwards. So only newly connected devices will be shown in the report. 

Link to comment
Share on other sites

Just now, MichalJ said:

So only newly connected devices will be shown in the report. 

Thanks for the response.

Yes indeed, I've made sure to connect/disconnect a usb stick to a test machine after any changes. Making sure the ESET agent is recognizing and blocking the USB each tim.

Still, no data in the report

 

Link to comment
Share on other sites

  • Administrators
26 minutes ago, rthompson said:

Thanks for the response.

Yes indeed, I've made sure to connect/disconnect a usb stick to a test machine after any changes. Making sure the ESET agent is recognizing and blocking the USB each tim.

Still, no data in the report

Is it logged locally in the Device Control log? If so, I'd recommend opening a support ticket with your local ESET distributor. They should ask you to set diagnostic verbosity for agent, reproduce the issue and collect logs for perusal.

Link to comment
Share on other sites

42 minutes ago, Marcos said:

Is it logged locally in the Device Control log?

Yes, any attempts to connect a USB device are logged locally on the machine. All info is there, make/model/serial etc.

We're running a trial of the system at the moment - I've sent an email to support but had nothing back in over a week...

I've got plenty of time today to crack the issue so if anyone has further suggestion, keep them coming :)

Link to comment
Share on other sites

Thanks for help all - I can now get a report.

Honestly, I'm not sure what I've done differently. Set it up from scratch with the same setting and now it's up and running

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...