McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverSearch discovered data 4Find signature percentage matches in data at restWhen registered text is plagiarized, it is unlikely that a 100 percent match will be found to the originaldocument. Finding only a percentage of the registered material is more likely to expose intellectualproperty theft.The Signature Percentage Match parameter can only be added to a rule to supplement other parameters thathave been defined. It is not possible to find percentage matches of registered data in a search.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies.• On your McAfee DLP appliance, select Policies.2 Open a policy, or add a new one.3 From the Actions menu, select Add Rule.4 Open the Content category.5 From the drop‐down lists, select Concept is any of and click ?.The Concepts pop‐up menu appears.6 From the Corporate Confidential category, select DocReg.The DocReg concept contains all of the signatures that were added during document registration.7 From the Discover menu, select Signature Percentage Match.Because an exact percentage match is unlikely, the match can only be greater than the percentageyou specify.8 Enter an integer in the value field.9 Click Save.When the rule is run, the DocReg signatures are matched against data in network file systems, andresults are reported on the Data‐at‐Rest dashboard.Search with the DocReg conceptSearching with the DocReg concept applies all existing signatures to the network data stream, networkrepositories, and endpoints.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 From the Content menu, select Concept is any of.3 Type DocReg into the value field.4 Click Search.McAfee Data Loss Prevention 9.2.2 Product Guide 113