McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverRemediating incidents 4Set up locations for exported filesSet up locations for exported files so that when sensitive files are found in a database or repository,they can be copied or moved to a shared folder.Export locations are used in file remediation and action rules.Only Windows shares (CIFS) are supported.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ExportLocations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Export Locations.2 From the Actions menu, select New.3 Type a location on the Create Export Location page.If the folder does not already exist, it is created.4 Select a credential to access the repository, or click New to create a new using the authenticationparameters of an existing account.5 Click Test to verify read/write access to the repository. If the credential is correct but the test isnegative, use Windows Explorer to verify that sharing is enabled and read/write privilege has beengranted.6 In Microsoft Windows Explorer, right‐click the target folder and select Properties.7 In the General tab, deselect the Read‐only checkbox.8 In the Sharing tab, select Share this folder.9 Click OK10 Click Save, then re‐test.Copy discovered filesCopy discovered files to a quarantined export location after a remedial action has been applied to anincident.When you copy, move, delete or encrypt a file, McAfee DLP Discover leaves a trace file at the originallocation to leave a record of the remedial process that has been applied.You can use Dynamic Variables to automatically inform users that the file has been copied to an exportlocation.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies | Action Rules.• On your McAfee DLP appliance, select Policies | Action Rules.McAfee Data Loss Prevention 9.2.2 Product Guide 117