McAfee Data Loss Prevention 9.2.2 Product Guide

Using templatesHow templates work 12Use a template to search for documentsYou can use a template to search for documents that are owned by specific users.Before you beginTo provide a path to user accounts, an LDAP server must be added to McAfee DLP Manager.For example, you might want to find all Microsoft Office documents belonging to a user. The OfficeApplication Files template identifies files that are created by Microsoft applications, plus files CSV and PDFformats.If you don't know what the template does, open it from the Templates page to examine its construction.You might want to edit it, or use it to create a template that contains only Microsoft Word and Excel fileformats.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Template | is any of and click ?.The Template pop‐up menu opens.4 From the Template menu, select Office Application Files.5 Open the Source/Destination category.6 From the component menu, select User Name | is any of , click ?, and select the directory server.The AD pop‐up window appears.7 Click Find, select the user, and click Apply.8 Click Search.The Search Results window appears.How templates workUsing templates saves time when searching, creating rules, or building capture filters. They makeentering the same values multiple times unnecessary.Pre‐installed standard templates can be used as tools to help find groups of related elements innetwork data.For example, the Source Code template contains patterns for most of the source code filetypes. It might be used to monitor network data for proprietary programs that insiders areattempting to send outside of the company.McAfee Data Loss Prevention 9.2.2 Product Guide 241