Users can write to a CD/ DVD even when the EndPointSecurity agent should be blocking it.
Specific CD/DVD writing applications (notably Roxio and Nero) use proprietary drivers that bypass the Windows filter drivers specification entirely and access the drive directly.
In these cases, the GFI EndPointSecurity agent is not able to detect these write operations. To test that the GFI agent is working correctly, you should try to write files to the CD/DVD using Windows Explorer, and If you are blocked from doing so, the GFI agent is working correctly.
It is recommended uninstalling and disallowing the installation of such CD/DVD writing software on machines where you don't want the users to be able to write data on a CD/DVD.
One can achieve this using GFI LANguard, among other solutions.