Environment
Novell ZENworks Endpoint Security Management 11.4 Policies
Novell ZENworks Endpoint Security Management 11.4.2 Storage Device Control Policy
Novell ZENworks Endpoint Security Management 11.4.3 Storage Device Control Policy
Novell ZENworks Endpoint Security Management 11.4.2 Storage Device Control Policy
Novell ZENworks Endpoint Security Management 11.4.3 Storage Device Control Policy
Situation
Storage Device Control Endpoint Security Policy disabling USB
storage devices.
Settings to allow access to devices imported vendorID and productID values from the USB Scanner Tool in the "Preferred Device List" to allow access for listed USB device..
Deploy to devices and processes policy as designed.
Upgraded ZCM Zone to v11.4.2 and the agent to v11.4.2.
The policy no longer allows access to the "allowed" devices to access on the device.
Settings to allow access to devices imported vendorID and productID values from the USB Scanner Tool in the "Preferred Device List" to allow access for listed USB device..
Deploy to devices and processes policy as designed.
Upgraded ZCM Zone to v11.4.2 and the agent to v11.4.2.
The policy no longer allows access to the "allowed" devices to access on the device.
Resolution
Edit the policy by scanning/importing the new USB devices (which
reenters the vendorID and productID values), republish the policy
and deploy to devices.
Cause
Upgrading the policy from v11.4.1 to v11.4.2 may have corrupted the
policy.
Though corrected in v11.4.3, it may have been imported in the failed state from ZCM v11.4.2 to v11.4.3.
Though corrected in v11.4.3, it may have been imported in the failed state from ZCM v11.4.2 to v11.4.3.
Additional Information
Bug 995780
https://bugzilla.novell.com/show_bug.cgi?id=995780
All USB Devices in the Access List must be re-imported and publish the policy.
https://bugzilla.novell.com/show_bug.cgi?id=995780
All USB Devices in the Access List must be re-imported and publish the policy.