McAfee Data Loss Prevention 9.2.2 Product Guide

12Using templatesAdd, modify, and delete templatesReview template constructionReview template construction to see how templates mirror the construction of searches, rules, andcapture filters. Because they share a common structure, templates can be used to abbreviate all ofthose operations.Each component type on the templates, rules, search and capture filter including templates that arerelated to the category.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies | Templates.• On your McAfee DLP appliance, select Policies | Templates.2 Click any Template Name on the page.Use the same procedure for standard or custom templates.3 Open Construction.4 Review the parameters by examining the value field, or by clicking the ? icon.Extending queries or rules with templatesEach component menu includes a Template selection that can be used with any component to provide awide‐ranging qualifier for a search or rule.When used as an additional parameter to extend any other component selection, a template can beused to extend a query or rule. For example, if a query uses a keyword or concept component to findany file containing confidential content, it can be extended to specific document types by using anOffice Document template.A CONFIDENTIAL concept might be used in a template to match data containing commonwords and phrases found in proprietary data. A template could be added to limit thatsearch to office documents or email message bodies.Add, modify, and delete templatesManaging templates will help you to use them to best advantage. You can add, modify, or delete them,or remove those that are no longer useful from rules or filters.Tasks• Add or modify templates on page 243Add or modify templates that define collections of content types, ports, protocols, email orIP addresses, user groups, endpoints, registered data, and other related data entities.• Delete templates on page 243Delete templates that are no longer useful. They can be deleted individually or as groups.• Remove templates from rules on page 243Remove templates that have been applied to rules or capture filters.242 McAfee Data Loss Prevention 9.2.2 Product Guide