Use the following procedures to block USB internet tethering while still allowing the use of the smartphone to store data:

Manage the Network Adapters:

1. Log on to the ePO console.
2. Click Menu, Policy Catalog.
3. Select Data Loss Prevention from the Products drop-down list.
4. Select a DLP Policy used on the endpoint PCs.
5. Click Settings, Device Classes.
6. Perform the following actions:
   1. Select Network Adapters under Device Class Name.
   2. Select Managed under Status.
   3. Select Upper Filter under Filter Type.
7. Click Add.
8. Click Apply policy to save the changes.

Block or monitor USB internet tethering:

1. Log on to the ePO console.
2. Click Menu, DLP Policy Manager.
3. Click the Definitions tab, expand Device Control, and click Device Templates.
4. Click Action, New, Plug and Play Device Template. 

Example configuration to block USB internet tethering for a Samsung Galaxy S4:

• Name equals Remote NDIS Device
• Bus Type equals USB
• Device Class equals Network Adapters
• Device Compatible ID (Advanced) contains USB\CLASS_E0&SUBCLASS_01&PROT_03
• USB (VID/PID Codes) equals VID: 04E8 PID: 6863
  NOTE: This VID/PID is specifically for a Samsung Galaxy S4 device. For other device VID/PIDs, see http://www.linux-usb.org/usb.ids.

5. Click Save.
6. Click Rule Sets and click an applicable rule set.
7. Click Device Control, Actions, New Rule, Plug and Play Device Rule.
   
   Example rule:

• Rule Name: Block/Monitor NDIS Device
• Condition: Is any User (ALL)
• Plug and Play: Is one of (OR) Remote NDIS Device
• Reaction
• Action: No Action
• User Notification: Default device management user notification [built-in]
• Report Incident: Checked

8. Click Save, apply the policy to the endpoint PC, and test the rule.
9. When you are satisfied with the results, set the Action (in step 7) to Block tethering.