Device Control - USB 3.0 - Devices not blocked

Hi,

Please help as we are experiencing issues with USB 3.0 ports and SEE Device Control 8.2.8 in our organisation which we are unable to resolve.

Orignally we found USB 3.0 controllers were blocked and didn’t work at all with SEE Device control, To allow access to USB 3.0 hubs / controllers our policy was updated with the specific device identifiers in the white list for the hub that is blocked. We then tested this and confirmed that non standard USB mass storage devices were blocked by the policy and that approved devices on our white list were still allowed when plugged into a USB 3.0 port.

However it has now come to light that certain devices (e.g. Apple iPhones / Samsung Galaxy) are not being blocked when they are connected to a USB 3.0 port but are blocked correctly when connected to a USB 2.0 port which indicates the policy settings are correct. The logs also show no record of the device being detected. The problem is that all our new PC hardware is being shipped with USB 3.0 controllers as standard, and even the latest version of Symantec Device control 8.2.8 seems to still have issues with USB 3.0 chipsets as we are unable to remove the hub from the whitelist without it shutting the whole controller down.

We have managed to resolve the issue on one of the models that uses the Renesas Electronics USB 3.0 Host Controller (HP Elitebook 8460p) by updating the driver to the latest version, however this hasn’t resolved the issue for our machines that use Intel(R) USB 3.0 eXtensible Host Controller.

In an attempt to resolve the issue on the Intel chipset machines I have updated the USB drivers, Bios, Management engine drivers, Chipset drviers, HP Windows 7 essential updates, USB 3.0 Port replicator driver and the latest Device control agent 8.2.8 with no success. Below is a summary of my findings:

Any assitance would be much appreacted as we have presure from our information security department to lock this down ASAP.