McAfee Data Loss Prevention 9.2.2 Product Guide

McAfee Data Loss Prevention 9.2.2 Product Guide McAfee Data Loss Prevention 9.2.2 Product Guide

kb.mcafee.com
from kb.mcafee.com More from this publisher
12.07.2015 Views

4Using McAfee DLP DiscoverGetting scan statistics and reportsTask1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click the radio button of the scan.3 Click Statistics.4 View the details in the Job Summary tab.5 Click the Repository Detail tab for more information.The Host Summary and Share Details per Host drop‐down menus appear.6 Open the menus and click the underlined values for more information.If useful information is reported, select Export to save it to a CSV file.Determining access to scanned filesWhen incidents are reported, the Access Control List for each file can be viewed in incident details.During scans, file metadata and permissions are fetched first, and permissions are reported on theIncident Details page.Export reports of scan statisticsThe results on the Scan Operation Statistics page can be exported to reports.All results generated during a scan are saved and appear on dashboards.If you have Microsoft Excel installed and are using Internet Explorer, the reports automatically open inExcel. If not, a comma‐separated values (CSV) text file opens.Because CSV is a generic ASCII format, it can be opened with any text editor, spreadsheet, ordatabase program. If the CSV file is very large (50,000 or more records), it will be compressed intoa .zip file before it is available for opening or saving.Generated reports are kept for 30 days from the last access date. Old reports are removed to free updisk space.Exported reports are shared across all users.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click Statistics.3 From the Report Options menu, select Export File List. The Discover Window Reports window appears.122 McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverGetting scan statistics and reports 44 [Optional] Add an email address to notify when the report completes.aIn the Email To field, enter an email address.bClick Update.Leave the Email To blank if you do not want to be notified.5 To check the status of reports, click Refresh.6 Click Download when the export completes.Types of scan statistics reportsThree types of scan statistics reports can be generated.Table 4-22 Types of scan statistics reportsReport typeDescriptionCurrent statistics Reports statistics which are currently viewable. They could be from the currentscan, the last one run, or any other historical scan.All statisticsExport file listReports all the statistics of all the runs of the scan taskReports the file list at share level (only files of the required share), IP level (onlyfiles of a required host), or task level (all files detected by the task across hostsand shares). If there is a single host with a single share, all three reports will bethe same.Get historical scan statisticsYou can get historical statistics from previously completed scans by selecting an export option fromthe Report Options menu in McAfee DLP Discover.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click Statistics.3 From the History menu, select a scan.Types of task status messagesMcAfee DLP Discover task status messages advise users of scan anomalies.Table 4-23 Types of task status messageStatus message Definition RemedyResource MissingConfiguration ErrorThe path does not exist, or the file might bemissing. It was found during the investigationphase (indexing), but is missing during thecrawling phase.The task database might have beencorrupted.Check on the repository tosee if it is really missing. Ifnot, restart the scan.Recreate the task. CallMcAfee Technical Support ifthat does not resolve theproblem.McAfee Data Loss Prevention 9.2.2 Product Guide 123

Using <strong>McAfee</strong> DLP DiscoverGetting scan statistics and reports 44 [Optional] Add an email address to notify when the report completes.aIn the Email To field, enter an email address.bClick Update.Leave the Email To blank if you do not want to be notified.5 To check the status of reports, click Refresh.6 Click Download when the export completes.Types of scan statistics reportsThree types of scan statistics reports can be generated.Table 4-22 Types of scan statistics reportsReport typeDescriptionCurrent statistics Reports statistics which are currently viewable. They could be from the currentscan, the last one run, or any other historical scan.All statisticsExport file listReports all the statistics of all the runs of the scan taskReports the file list at share level (only files of the required share), IP level (onlyfiles of a required host), or task level (all files detected by the task across hostsand shares). If there is a single host with a single share, all three reports will bethe same.Get historical scan statisticsYou can get historical statistics from previously completed scans by selecting an export option fromthe Report Options menu in <strong>McAfee</strong> DLP Discover.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Classify | Discover Scan Operations | ScanOperations.• On your <strong>McAfee</strong> DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click Statistics.3 From the History menu, select a scan.Types of task status messages<strong>McAfee</strong> DLP Discover task status messages advise users of scan anomalies.Table 4-23 Types of task status messageStatus message Definition RemedyResource MissingConfiguration ErrorThe path does not exist, or the file might bemissing. It was found during the investigationphase (indexing), but is missing during thecrawling phase.The task database might have beencorrupted.Check on the repository tosee if it is really missing. Ifnot, restart the scan.Recreate the task. Call<strong>McAfee</strong> Technical Support ifthat does not resolve theproblem.<strong>McAfee</strong> <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> <strong>9.2.2</strong> <strong>Product</strong> <strong>Guide</strong> 123

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!