McAfee Data Loss Prevention 9.2.2 Product Guide
McAfee Data Loss Prevention 9.2.2 Product Guide McAfee Data Loss Prevention 9.2.2 Product Guide
4Using McAfee DLP DiscoverGetting scan statistics and reportsTask1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click the radio button of the scan.3 Click Statistics.4 View the details in the Job Summary tab.5 Click the Repository Detail tab for more information.The Host Summary and Share Details per Host drop‐down menus appear.6 Open the menus and click the underlined values for more information.If useful information is reported, select Export to save it to a CSV file.Determining access to scanned filesWhen incidents are reported, the Access Control List for each file can be viewed in incident details.During scans, file metadata and permissions are fetched first, and permissions are reported on theIncident Details page.Export reports of scan statisticsThe results on the Scan Operation Statistics page can be exported to reports.All results generated during a scan are saved and appear on dashboards.If you have Microsoft Excel installed and are using Internet Explorer, the reports automatically open inExcel. If not, a comma‐separated values (CSV) text file opens.Because CSV is a generic ASCII format, it can be opened with any text editor, spreadsheet, ordatabase program. If the CSV file is very large (50,000 or more records), it will be compressed intoa .zip file before it is available for opening or saving.Generated reports are kept for 30 days from the last access date. Old reports are removed to free updisk space.Exported reports are shared across all users.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click Statistics.3 From the Report Options menu, select Export File List. The Discover Window Reports window appears.122 McAfee Data Loss Prevention 9.2.2 Product Guide
Using McAfee DLP DiscoverGetting scan statistics and reports 44 [Optional] Add an email address to notify when the report completes.aIn the Email To field, enter an email address.bClick Update.Leave the Email To blank if you do not want to be notified.5 To check the status of reports, click Refresh.6 Click Download when the export completes.Types of scan statistics reportsThree types of scan statistics reports can be generated.Table 4-22 Types of scan statistics reportsReport typeDescriptionCurrent statistics Reports statistics which are currently viewable. They could be from the currentscan, the last one run, or any other historical scan.All statisticsExport file listReports all the statistics of all the runs of the scan taskReports the file list at share level (only files of the required share), IP level (onlyfiles of a required host), or task level (all files detected by the task across hostsand shares). If there is a single host with a single share, all three reports will bethe same.Get historical scan statisticsYou can get historical statistics from previously completed scans by selecting an export option fromthe Report Options menu in McAfee DLP Discover.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click Statistics.3 From the History menu, select a scan.Types of task status messagesMcAfee DLP Discover task status messages advise users of scan anomalies.Table 4-23 Types of task status messageStatus message Definition RemedyResource MissingConfiguration ErrorThe path does not exist, or the file might bemissing. It was found during the investigationphase (indexing), but is missing during thecrawling phase.The task database might have beencorrupted.Check on the repository tosee if it is really missing. Ifnot, restart the scan.Recreate the task. CallMcAfee Technical Support ifthat does not resolve theproblem.McAfee Data Loss Prevention 9.2.2 Product Guide 123
- Page 72 and 73: 4Using McAfee DLP DiscoverTypical s
- Page 74 and 75: 4Using McAfee DLP DiscoverTypical s
- Page 76 and 77: 4Using McAfee DLP DiscoverRegisteri
- Page 78 and 79: 4Using McAfee DLP DiscoverRegisteri
- Page 80 and 81: 4Using McAfee DLP DiscoverCrawling
- Page 82 and 83: 4Using McAfee DLP DiscoverCrawling
- Page 84 and 85: 4Using McAfee DLP DiscoverCrawling
- Page 86 and 87: 4Using McAfee DLP DiscoverOptimizin
- Page 88 and 89: 4Using McAfee DLP DiscoverOptimizin
- Page 90 and 91: 4Using McAfee DLP DiscoverManaging
- Page 92 and 93: 4Using McAfee DLP DiscoverManaging
- Page 94 and 95: 4Using McAfee DLP DiscoverManaging
- Page 96 and 97: 4Using McAfee DLP DiscoverManaging
- Page 98 and 99: 4Using McAfee DLP DiscoverManaging
- Page 100 and 101: 4Using McAfee DLP DiscoverManaging
- Page 102 and 103: 4Using McAfee DLP DiscoverManaging
- Page 104 and 105: 4Using McAfee DLP DiscoverScan stat
- Page 106 and 107: 4Using McAfee DLP DiscoverManaging
- Page 108 and 109: 4Using McAfee DLP DiscoverSearch di
- Page 110 and 111: 4Using McAfee DLP DiscoverSearch di
- Page 112 and 113: 4Using McAfee DLP DiscoverSearch di
- Page 114 and 115: 4Using McAfee DLP DiscoverRemediati
- Page 116 and 117: 4Using McAfee DLP DiscoverRemediati
- Page 118 and 119: 4Using McAfee DLP DiscoverRemediati
- Page 120 and 121: 4Using McAfee DLP DiscoverRemediati
- Page 124 and 125: 4Using McAfee DLP DiscoverGetting s
- Page 126 and 127: 4Using McAfee DLP DiscoverConfiguri
- Page 128 and 129: 4Using McAfee DLP DiscoverConfiguri
- Page 130 and 131: 5Integrating McAfee DLP EndpointTyp
- Page 132 and 133: 5Integrating McAfee DLP EndpointTyp
- Page 134 and 135: 5Integrating McAfee DLP EndpointTyp
- Page 136 and 137: 5Integrating McAfee DLP EndpointTyp
- Page 138 and 139: 5Integrating McAfee DLP EndpointVie
- Page 140 and 141: 5Integrating McAfee DLP EndpointCon
- Page 142 and 143: 5Integrating McAfee DLP EndpointUni
- Page 144 and 145: 5Integrating McAfee DLP EndpointUni
- Page 146 and 147: 5Integrating McAfee DLP EndpointUni
- Page 148 and 149: 5Integrating McAfee DLP EndpointTag
- Page 150 and 151: 5Integrating McAfee DLP EndpointTag
- Page 152 and 153: 5Integrating McAfee DLP EndpointTag
- Page 154 and 155: 5Integrating McAfee DLP EndpointTag
- Page 156 and 157: 5Integrating McAfee DLP EndpointTag
- Page 158 and 159: 5Integrating McAfee DLP EndpointTag
- Page 160 and 161: 5Integrating McAfee DLP EndpointCon
- Page 162 and 163: 5Integrating McAfee DLP EndpointCon
- Page 164 and 165: 5Integrating McAfee DLP EndpointCon
- Page 166 and 167: 5Integrating McAfee DLP EndpointCon
- Page 168 and 169: 5Integrating McAfee DLP EndpointCon
- Page 170 and 171: 5Integrating McAfee DLP EndpointCon
Using <strong>McAfee</strong> DLP DiscoverGetting scan statistics and reports 44 [Optional] Add an email address to notify when the report completes.aIn the Email To field, enter an email address.bClick Update.Leave the Email To blank if you do not want to be notified.5 To check the status of reports, click Refresh.6 Click Download when the export completes.Types of scan statistics reportsThree types of scan statistics reports can be generated.Table 4-22 Types of scan statistics reportsReport typeDescriptionCurrent statistics Reports statistics which are currently viewable. They could be from the currentscan, the last one run, or any other historical scan.All statisticsExport file listReports all the statistics of all the runs of the scan taskReports the file list at share level (only files of the required share), IP level (onlyfiles of a required host), or task level (all files detected by the task across hostsand shares). If there is a single host with a single share, all three reports will bethe same.Get historical scan statisticsYou can get historical statistics from previously completed scans by selecting an export option fromthe Report Options menu in <strong>McAfee</strong> DLP Discover.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Classify | Discover Scan Operations | ScanOperations.• On your <strong>McAfee</strong> DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 Click Statistics.3 From the History menu, select a scan.Types of task status messages<strong>McAfee</strong> DLP Discover task status messages advise users of scan anomalies.Table 4-23 Types of task status messageStatus message Definition RemedyResource MissingConfiguration ErrorThe path does not exist, or the file might bemissing. It was found during the investigationphase (indexing), but is missing during thecrawling phase.The task database might have beencorrupted.Check on the repository tosee if it is really missing. Ifnot, restart the scan.Recreate the task. Call<strong>McAfee</strong> Technical Support ifthat does not resolve theproblem.<strong>McAfee</strong> <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> <strong>9.2.2</strong> <strong>Product</strong> <strong>Guide</strong> 123