USB Device Control Problems
Running 3.6.34. I started to play with this feature and am disappointed so far. My big issue is the very long time the policy changes take to go into effect, and am wondering if I am doing something wrong, though pretty sure not since the policy eventually took effect. First, I added a policy to block all USB devices. No effect, recognized anything I plugged in, even after doing an apply policy change from both Capture Client and Capture Client Management. Messed around for awhile, gave up for the day (Friday) and on Monday happened to reinsert the thumb drive to actually use it for something, and voila, blocked with pop-up from CC! Okay, got back to play, using the device info in the log, did an allow of that device based on its serial number. No dice, even after applying policy from client and management side. Tried it also by vendor and product IDs, still no love on Valentine's Day. I suspect later tonight or tomorrow it may take effect, but that is totally unacceptable. (update - worked 45 min later when I tried - still unacceptable) If a manager needs to whitelist something for a user it needs to take effect NOW, not tomorrow! Help!
As a related question, without involving device control at all, doesn't Capture Client have the smarts to scan a USB storage device that gets plugged in? If it can't then that's pretty sad, as that's been a basic function of antivirus programs going back 20+ years. If it can scan the device then what's the point of device control, since Capture Client has it covered?