I am posting this for anyone who, like I just was, asked to provide a report of USB activity for an employee who was being terminated.
We are running Endpoint Security e84.40 with Media Encryption and Port Protection 8.60.6.7006.
Our policy for Media Protection is set to "Log all events"
Here are the steps I performed to produce a report:
Open Smart Endpoint
Click Smart Console
Click Logs & Monitor
Use this search string:
blade:"Media Encryption & Port Protection" AND "File Operation" AND username
If there is another method or a built-in report that would provide the same results, that would be awesome.