McAfee Data Loss Prevention 9.2.2 Product Guide

5Integrating McAfee DLP EndpointConfiguring McAfee DLP Endpoint in McAfee DLP ManagerConfiguring McAfee DLP Endpoint in McAfee DLP ManagerAfter McAfee DLP Endpoint and its components are installed on McAfee DLP Manager, you must set upessential functionality to establish communication through ePolicy Orchestrator.See the McAfee Data Loss Prevention Installation Guide for information on integrating McAfee DLPEndpoint into the network product suite.Set up the software to work with the network product suite by completing the following tasks:• Enable unified policy management by generating a policy, setting a posting period, and selecting acompatibility mode.• Add an agent override password to encrypt and decrypt evidence and respond to agent overriderequest codes.On the same page, you might want to define printer models that cannot be controlled by McAfee DLPsoftware, but this is optional and can be done at your convenience.Next you can define unified rules on the Policies page, then view the Incidents | Data‐in‐Use dashboard toverify that the endpoint events are being generated and reported.Define unmanaged printersBecause some printers might not work with the proxy driver architecture required for McAfee DLPmanagement, they should be whitelisted and excluded from management by the system.Unmanaged printer definitions are created by selecting printer model information from the ActiveDirectory server pop‐up menu. There might not be any printers in your organization that cannot bemanaged, so this is an optional operation.If you have not added an Active Directory server to the system, type printer paths and names to bewhitelisted in the Printer Model field, then click Add Printer.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sysconfig | Endpoint Configuration |Miscellaneous and click Unmanaged Printer Models.• On your McAfee DLP appliance, select System | Endpoint Configuration | Miscellaneous and clickUnmanaged Printer Models.2 Click ?, then Find, and select from an existing Directory Server list.3 Click Apply.4 Click Add Printer.Add an Agent Override passwordYou must set an Agent Override password before working with McAfee DLP Endpoint. It is used withMcAfee DLP Agent to generate authentication codes that are needed to approve agent overriderequests.McAfee DLP Endpoint generates agent override requests when operations that require authenticationare attempted. For example, you might want to release quarantined files, or encrypt and decryptevidence.140 McAfee Data Loss Prevention 9.2.2 Product Guide