I have enabled USB Device Control, to deny access to USB Devices. This has been done by creating a Policy and Computer Groups. The USB Device control works with USB Memory sticks, however, when plugging in an Android Phone via USB, it doesn't prevent the Storage on the Android phone from being viewed / copied to and from the device. This is a bug and a major security flaw, in that it allows the copying of files on Android phones to and from the Computer, over a USB interface. |
Currently the design is that only USB storage devices are blocked.
https://www.symantec.com/docs/HOWTO98518
https://www.symantec.com/docs/TECH217392