McAfee Data Loss Prevention 9.2.2 Product Guide

Integrating McAfee DLP EndpointTypical scenarios 5Keep data from being printed on local printersIf the Protect Local Printers rule is deployed, McAfee DLP printer drivers are installed in place of third partydrivers. This prevents users from printing sensitive data.For example, if you suspect that local users are attempting to print and email corporate confidentialdocuments, you might use the following procedure to detect that activity, extract the content of thedocument to the evidence server, and notify a manager that the attempt has been made.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies.• On your McAfee DLP appliance, select Policies.2 Click a policy and a rule, or create new ones.Make sure the policy is active and the Inherit Policy State state of the rule is set to Enabled.3 On the Add Rule or Edit Rule page, select Concept from the Content menu and click ?.The Concepts pop‐up menu appears.4 From the Corporate Confidential menu, select document types or click Select All.5 Click Apply.6 From the Source/Destination menu, select Email Address and enter the user's email address in the valuefield, or select the Any Email Address checkbox.7 From the Endpoint menu, select Protect Local Printers, click ?, select the Enable checkbox, and click Apply.8 Review the reaction settings by clicking the Actions tab of the rule to which Endpoint parameters havebeen added.If they do not match your objectives, go to Actions Rules and edit the rule, or create a new one.9 Click Save.Protect data using specific encryption typesIf you suspect that members of your Finance Department are emailing files encrypted with McAfeeEndpoint Encryption for PC to their own email accounts so they can work on them at home, you canfind them by identifying the encryption type and deploying a protection rule to block that activity.Encryption types can be used in rules to act on files that are unencrypted, password‐protected, orencrypted with a specific algorithm.If some users are permitted to transmit encrypted files, you can create a Source/Destination user exception,or add a Request Justification option to the reaction.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies.• On your McAfee DLP appliance, select Policies.2 Click a policy and a rule, or create new ones.Make sure the policy is active and the Inherit Policy State state of the rule is set to Enabled.McAfee Data Loss Prevention 9.2.2 Product Guide 137