McAfee Data Loss Prevention 9.2.2 Product Guide
McAfee Data Loss Prevention 9.2.2 Product Guide McAfee Data Loss Prevention 9.2.2 Product Guide
8Working with casesModify casesYou can export a single case, or include several cases in the same archive.• Select a single case and click Export.• Select one or more cases, then select Export Selected Cases from the Actions menu. In the Proceed toexport? pop‐up, click OK or Cancel.The archive containing the case(s) appears in the these file lists:• ePolicy Orchestrator — Menu | Data Loss Prevention | DLP Reporting | Exported Cases• Your McAfee DLP appliance — Case | Exported CasesModify casesAs you gather more information about a case, you can develop it gradually by adding incidents,defining different aspects of it, and recording updates until you are able to resolve it.Tasks• Change ownership of a case on page 194Change ownership of a case to give primary responsibility for resolution to a specific usergroup.• Change status of a case on page 195Change the status of a case to indicate its stage of resolution.• Change the priority of a case on page 195Change the priority of a case as it moves through stages of resolution.• Change the resolution stage of a case on page 195Change the resolution state of a case if its condition has changed.• Add notes to a case on page 195Add notes to a case to add comments that might help to resolve it.Change ownership of a caseChange ownership of a case to give primary responsibility for resolution to a specific user group.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Case Management.• On your McAfee DLP appliance, select Case | Case Management.2 Click Details for a case.3 From the Owner menu, select a user group.Select the Notify Owner checkbox to send email notification of case updates.4 Click Apply.194 McAfee Data Loss Prevention 9.2.2 Product Guide
Working with casesModify cases 8Change status of a caseChange the status of a case to indicate its stage of resolution.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Case Management.• On your McAfee DLP appliance, select Case | Case Management.2 Click Details for a case.3 From the Status menu, select a new status.4 Click Apply.Change the priority of a caseChange the priority of a case as it moves through stages of resolution.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Case Management.• On your McAfee DLP appliance, select Case | Case Management.2 Click Details for the case.3 From the Priority menu, select a new priority.4 Click Apply.Change the resolution stage of a caseChange the resolution state of a case if its condition has changed.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Case Management.• On your McAfee DLP appliance, select Case | Case Management.2 Click Details for a case.3 From the Resolution menu, select a new stage.4 Click Apply.Add notes to a caseAdd notes to a case to add comments that might help to resolve it.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Case Management.• On your McAfee DLP appliance, select Case | Case Management.2 Click Details for a case.McAfee Data Loss Prevention 9.2.2 Product Guide 195
- Page 144 and 145: 5Integrating McAfee DLP EndpointUni
- Page 146 and 147: 5Integrating McAfee DLP EndpointUni
- Page 148 and 149: 5Integrating McAfee DLP EndpointTag
- Page 150 and 151: 5Integrating McAfee DLP EndpointTag
- Page 152 and 153: 5Integrating McAfee DLP EndpointTag
- Page 154 and 155: 5Integrating McAfee DLP EndpointTag
- Page 156 and 157: 5Integrating McAfee DLP EndpointTag
- Page 158 and 159: 5Integrating McAfee DLP EndpointTag
- Page 160 and 161: 5Integrating McAfee DLP EndpointCon
- Page 162 and 163: 5Integrating McAfee DLP EndpointCon
- Page 164 and 165: 5Integrating McAfee DLP EndpointCon
- Page 166 and 167: 5Integrating McAfee DLP EndpointCon
- Page 168 and 169: 5Integrating McAfee DLP EndpointCon
- Page 170 and 171: 5Integrating McAfee DLP EndpointCon
- Page 172 and 173: 6Managing the Home pageHow the Home
- Page 174 and 175: 7Using the Incidents dashboardTypic
- Page 176 and 177: 7Using the Incidents dashboardSort
- Page 178 and 179: 7Using the Incidents dashboardGetti
- Page 180 and 181: 7Using the Incidents dashboardGetti
- Page 182 and 183: 7Using the Incidents dashboardSet u
- Page 184 and 185: 7Using the Incidents dashboardGener
- Page 186 and 187: 7Using the Incidents dashboardCusto
- Page 188 and 189: 7Using the Incidents dashboardContr
- Page 190 and 191: 8Working with casesManage case perm
- Page 192 and 193: 8Working with casesAdd, delete, or
- Page 196 and 197: 8Working with casesCustomize cases3
- Page 198 and 199: 8Working with casesCustomize cases4
- Page 200 and 201: 9Managing policies and rulesHow pol
- Page 202 and 203: 9Managing policies and rulesTypical
- Page 204 and 205: 9Managing policies and rulesTypical
- Page 206 and 207: 9Managing policies and rulesManagin
- Page 208 and 209: 9Managing policies and rulesAdd, mo
- Page 210 and 211: 9Managing policies and rulesAdd, mo
- Page 212 and 213: 9Managing policies and rulesManage
- Page 214 and 215: 9Managing policies and rulesManage
- Page 216 and 217: 9Managing policies and rulesManage
- Page 218 and 219: 9Managing policies and rulesIdentif
- Page 220 and 221: 9Managing policies and rulesIdentif
- Page 222 and 223: 10Managing action rulesHow McAfee D
- Page 224 and 225: 10Managing action rulesAdd, modify,
- Page 226 and 227: 10Managing action rulesAdd, modify,
- Page 228 and 229: 10Managing action rulesAdd, modify,
- Page 230 and 231: 10Managing action rulesAdd, modify,
- Page 232 and 233: 11Managing conceptsTypical scenario
- Page 234 and 235: 11Managing conceptsAdd, apply, rest
- Page 236 and 237: 11Managing conceptsAdd, apply, rest
- Page 238 and 239: 11Managing conceptsAdd, apply, rest
- Page 240 and 241: 12Using templatesTypical scenariosT
- Page 242 and 243: 12Using templatesAdd, modify, and d
Working with casesModify cases 8Change status of a caseChange the status of a case to indicate its stage of resolution.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Case Management.• On your <strong>McAfee</strong> DLP appliance, select Case | Case Management.2 Click Details for a case.3 From the Status menu, select a new status.4 Click Apply.Change the priority of a caseChange the priority of a case as it moves through stages of resolution.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Case Management.• On your <strong>McAfee</strong> DLP appliance, select Case | Case Management.2 Click Details for the case.3 From the Priority menu, select a new priority.4 Click Apply.Change the resolution stage of a caseChange the resolution state of a case if its condition has changed.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Case Management.• On your <strong>McAfee</strong> DLP appliance, select Case | Case Management.2 Click Details for a case.3 From the Resolution menu, select a new stage.4 Click Apply.Add notes to a caseAdd notes to a case to add comments that might help to resolve it.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Case Management.• On your <strong>McAfee</strong> DLP appliance, select Case | Case Management.2 Click Details for a case.<strong>McAfee</strong> <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> <strong>9.2.2</strong> <strong>Product</strong> <strong>Guide</strong> 195