McAfee Data Loss Prevention 9.2.2 Product Guide

Managing policies and rulesTypical scenarios 97 Click Actions, then Add Action to add more actions, if needed.The standard rule is set to automatically assign any incidents to Human Resources.8 Click Save and periodically check the Incidents dashboard for results.In the dashboard Group by frame, click the Employee Discontent policy to immediately locate violations.Block data containing source codeEmployees who are leaving the company might feel they have a right to the code they have written.You can take measures to protect it by defining the source code content type and setting up actionrules that will fire if it is found.You can protect your company's intellectual property by configuring your systems to block all sourcecode leaving the network. You might customize the rule to recognize a specific source code type, thenmake sure the responsible party receives email notification of the action.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Policies.• On your McAfee DLP appliance, select Policies.2 Open an existing policy and an appropriate rule, or create new ones.3 Open the Content category and select Content Type | is any of, then click ?The Content Type pop‐up menu appears.4 Open the Source Code category and select one or more source code types.If you don't know the source code type, select Template | equals, click ? and select Source Code instead.The template covers a collection of common types.5 Click Apply.6 Click the Action tab.The Edit Action Rule page appears.7 Click Add Action and select an appropriate action rule. For example, if Security should receivenotification, you might apply Block and Assign to InfoSec action rules.8 Click Save.Block transmission of financial dataEven the most dedicated employees might not realize the implications of failing to protect financialdocuments, or they might not know how to encrypt them.You can protect financial data by adding a concept that finds a variety of financial documents to a rule,then attach an action rule to prevent them from leaving the network.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Policies.• On your McAfee DLP appliance, select Policies.2 Open an existing policy and rule, or create new ones.McAfee Data Loss Prevention 9.2.2 Product Guide 203