McAfee Data Loss Prevention 9.2.2 Product Guide

Integrating McAfee DLP EndpointControlling devices 5Add a removable storage file access ruleRemovable storage device file access rules are used to block executables on plug‐in devices fromrunning. Whitelisted application definitions provide lists of specific files that are exempt from theblocking rule.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sys Config | Endpoint Configuration.• On your McAfee DLP appliance, select System | Endpoint Configuration.2 In the navigation pane under Device Management, select Device Definitions, and locate the Removable StorageFile Access Device Rule section.The available device rules appear in the right‐hand pane.3 From the Actions menu, select Add New.The Add Removable Storage File Access Device Rule window appears.4 Type in a name and optional description, then select Active from the State menu.5 Select the Include or Exclude checkboxes from the available list to define the device rule.6 Define the user names, groups, and organizations to whom the device rule will be applied.Select the user is none of condition to exclude any of those parameters.Click + to add additional parameters.7 Click Save.Add a plug and play device definitionPlug and play device definitions allow you to manage and control most available plug and play devices.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sys Config | Endpoint Configuration.• On your McAfee DLP appliance, select System | Endpoint Configuration.2 In the navigation pane under Device Management, select Device Definitions.The available device definitions appear.3 From the Actions menu, select Add New.The Add Plug and Play Device Definition window appears.4 Type in a name and optional description for the new device definition.5 Select a Parameter Name checkbox from the available list.The Edit Definition Parameter dialog box appears.McAfee Data Loss Prevention 9.2.2 Product Guide 163