McAfee Data Loss Prevention 9.2.2 Product Guide

4Using McAfee DLP DiscoverManaging scans2 Add a scan operation and define the target of the scan in the Node Definitions tab, then click the Filterstab.3 Open the Filters category, then the Folders menu.4 Type in the folders to be scanned on the share.Absolute Directory Path is recognized as the base directory. All subdirectories matching the pattern willbe crawled.Examples• Absolute Directory Path > equals > C$/Eng/Network/Drawings• Directory Pattern > contains > Human Resources• Directory Pattern > does not contain > Employee Records5 If more granularity is needed, define the file properties of the scan.6 Click Save.Define policies to be used in a scanDefine policies for a Discover scan to apply rules to data at rest in targeted repository. When a matchis found, an incident is displayed on the dashboard and stored in the database.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 After adding a scan operation and defining the target in n the Node Definition tab, click the Policies tab.3 Select one or more policies and Add or Add All to the Selected Policies.Depending on the size of the repository, you will get better results from the scan if you select fewerpolicies.4 Click Save.Using credentials to authorize entryCredentials are needed to authorize entry to repositories that are to be scanned.Before you run a scan on a repository, you must have an account on it for which you can providecredentials. Some systems might also require a domain name to complete the authentication process.If the data in a file system is openly accessible, you can use the default credential None.Testing repository credentialsRepositories cannot be scanned without authentication. You can ensure that the repository isaccessible by testing your credentials before you start the scan.On the Node Definition page, you can click the Test button after defining the target of the scan.Authentication failed, Success, or No Shares Detected will appear.If access to the repository is denied or the node definition is incorrect, the node will be highlighted inred; otherwise a green highlight will appear.100 McAfee Data Loss Prevention 9.2.2 Product Guide