McAfee Data Loss Prevention 9.2.2 Product Guide

11Managing conceptsTypical scenarios3 In the Content category, add, delete, or modify the expressions to fit the circumstances, then Save.4 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies.• On your McAfee DLP appliance, select Policies.5 From the Actions menu, select Add Policy, and add a name and optional description.6 Select one or more Suppress incidents checkboxes.7 From the Actions menu, select Add Rule, and add a name and optional description.8 Open the Content category and select Concept > is any of.9 Click ? and select the HATE‐RACISM checkbox from the Acceptable Use concept category.10 Click Apply, then Save the rule and the policy.11 Let the rule run. After some time, reopen the policy and monitor matches using the Chart feature.12 When you see that useful results are being generated as expected, restore reporting to thedashboards by clearing the checkboxes and Save.13 On the Incidents dashboard, monitor results by periodically checking your new policy in the Group by...frame.Monitor social networking trafficUsing McAfee DLP standard content concepts to find patterns in traffic is one way to monitor andmanage usage of social networking sites.For example, employees who are accustomed to using social networking sites might not realize howmuch time they are spending on activities that reduce their productivity, or how much sensitiveinformation might be leaked in the process. You might use the BLOGPOST concept to identify traffic toand from such sites.On the Concepts page, open the Online category and click BLOGPOST to find out what sites are covered. Ifnecessary, modify the concept to include additional sites so that you can figure out how to control thesituation.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Concept | is any of and click ?.The Concept pop‐up menu opens.4 From the Online category, select the BLOGPOST checkbox.5 Click Apply.6 Click Search or Save as Rule.232 McAfee Data Loss Prevention 9.2.2 Product Guide