McAfee Data Loss Prevention 9.2.2 Product Guide

5Integrating McAfee DLP EndpointTagging and tracking3 On the Add Rule or Edit Rule page, select User Groups from the Source/Destination menu, and click ?.4 From the directory server pop‐up menu, click Find and click the technical illustrators' user group.5 Click Apply.6 From the Endpoint menu, select File Extension, click ?, and select the applications from the pop‐upmenu.In this use case, the PSD file type is listed, but you would have to add the AI file type in advance.7 Click Apply.8 From the Endpoint menu, select Network Path, click ?, and use Find to select the share that contains thefiles.9 Click Apply, then Save.Protect data using an application-based tagYou can use an application protection rule to keep users from modifying or distributing all MicrosoftOffice documents on a protected Windows share.Before you beginIf you want to use an Existing Tag Label, you must first create one on the Endpoint Configurationpage.Suppose you have a collection of Health Insurance Portability and Accountability Act Compliancedocuments that must be not only be kept confidential, but must not be modified in any way.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies.• On your McAfee DLP appliance, select Policies.2 Click a policy and a rule, or create new ones.Make sure the policy and rule are in an Enabled state.3 On the Add Rule or Edit Rule page, select Concept from the Content menu and click ?.The concepts palette appears.4 From the Source/Destination menu, select User Group and click ?.5 Click Find, then click the user group that is to be restricted.The user group is added to the value field.6 From the Endpoint menu, select Network Path and click ?.7 Click Find, then click the share containing the HIPAA documents.8 Click Apply.The share is added to the value field.9 Add an Endpoint parameter by clicking +.152 McAfee Data Loss Prevention 9.2.2 Product Guide