<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic USB Activity Report from Smart Endpoint / Smart Console in Endpoint</title>
    <link>https://community.checkpoint.com/t5/Endpoint/USB-Activity-Report-from-Smart-Endpoint-Smart-Console/m-p/113958#M4105</link>
    <description>&lt;P&gt;I am posting this for anyone who, like I just was, asked to provide a report of USB activity for an employee who was being terminated.&lt;/P&gt;&lt;P&gt;We are running Endpoint Security e84.40 with Media Encryption and Port Protection 8.60.6.7006.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Our policy for Media Protection is set to "Log all events"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Here are the steps I performed to produce a report:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Open Smart Endpoint&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;C&lt;/SPAN&gt;&lt;SPAN&gt;lick Smart Console&lt;/SPAN&gt;&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;Click Logs &amp;amp; Monitor&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;Use this search string:&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;blade:"Media Encryption &amp;amp; Port Protection" AND "File Operation" AND username&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;If there is another method or a built-in report that would provide the same results, that would be awesome.&lt;/SPAN&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
    <pubDate>Thu, 18 Mar 2021 15:37:20 GMT</pubDate>
    <dc:creator>Jason_Grubbs</dc:creator>
    <dc:date>2021-03-18T15:37:20Z</dc:date>
    <item>
      <title>USB Activity Report from Smart Endpoint / Smart Console</title>
      <link>https://community.checkpoint.com/t5/Endpoint/USB-Activity-Report-from-Smart-Endpoint-Smart-Console/m-p/113958#M4105</link>
      <description>&lt;P&gt;I am posting this for anyone who, like I just was, asked to provide a report of USB activity for an employee who was being terminated.&lt;/P&gt;&lt;P&gt;We are running Endpoint Security e84.40 with Media Encryption and Port Protection 8.60.6.7006.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Our policy for Media Protection is set to "Log all events"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Here are the steps I performed to produce a report:&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;Open Smart Endpoint&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;C&lt;/SPAN&gt;&lt;SPAN&gt;lick Smart Console&lt;/SPAN&gt;&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;Click Logs &amp;amp; Monitor&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;Use this search string:&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;blade:"Media Encryption &amp;amp; Port Protection" AND "File Operation" AND username&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;If there is another method or a built-in report that would provide the same results, that would be awesome.&lt;/SPAN&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
      <pubDate>Thu, 18 Mar 2021 15:37:20 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Endpoint/USB-Activity-Report-from-Smart-Endpoint-Smart-Console/m-p/113958#M4105</guid>
      <dc:creator>Jason_Grubbs</dc:creator>
      <dc:date>2021-03-18T15:37:20Z</dc:date>
    </item>
  </channel>
</rss>

