McAfee Data Loss Prevention 9.2.2 Product Guide

2Using McAfee DLP MonitorTypical scenariosFind source code leaving the networkYou can use the Source Code content type to find intellectual property that might be leaving thecompany.Narrow your selection to one or two source code types to keep from getting too many results.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Content Type | is any of and click ?.The Content Types pop‐up windows appears.4 Open the Source Code category, then select checkboxes to define one or more code types.5 Open the UNIX category, then select checkboxes to define one or more shell scripts.6 Click Apply.7 Click Search.Find encrypted traffic and filesInsiders attempting to conceal illegal activity or steal your intellectual property routinely useencryption.This case helps you to identify the sources and destinations of encrypted traffic and files on yournetwork to expose those activities.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Content Type | is any of and click ?.4 From the Binary menu, select Binary.5 From the Office Applications menu, select EncryptedPowerpoint, EncryptedExcel, EncryptedWord, EncryptedPDF andPDF.6 From the Protocol menu, select Crypto.7 Click Apply.8 Click Search.22 McAfee Data Loss Prevention 9.2.2 Product Guide