McAfee Data Loss Prevention 9.2.2 Product Guide

13Managing McAfee DLP systemsConfigure McAfee DLP devicesAdd McAfee DLP devicesAdd McAfee DLP appliances to McAfee DLP systems through McAfee DLP Manager. When newappliances are added, an SSH communication tunnel is created between them.Adding a McAfee DLP appliance wipes the current configuration of that machine, but captured data,cases, and incidents will not be lost. Unless you have previously deployed policies to All Devices, you willhave to edit them to add the device.If a device is registered with McAfee DLP Manager, the device cannot be brought back to standalonemode after deregistering it, and it will have to be reinstalled.On some networks you can choose a port configuration. The McAfee DLP appliance is a Gigabit networkdevice, so it is possible to bring it down.The Add Device page is also used to add an ePolicy Orchestrator server (ePolicy Orchestrator GUI IPAddress) and database (ePolicy Orchestrator Database IP or hostname). If the ePolicy Orchestratordevice checkbox is selected, the options change.If Incident Copy Only is selected from the Type menu, there is no integration with unified policy, and youmust use the McAfee DLP Endpoint Policy Manager to update the policy.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sys Config | System Administration |Devices.• On your McAfee DLP appliance, select System | System Administration | Devices.2 Select Actions | New Device.3 Enter the Device IP or hostname and Password.Use the root user account for association. McAfee recommends that you change the root passwordon the appliance before adding it to McAfee DLP Manager. If you change the IP address, thenetwork service needs to be restarted. Stingray automatically restarts the box to register thechange.4 Click Add.5 Click OK to confirm or Cancel the registration.6 Wait for Status to turn green.The CPU usage display indicates that the registration tasks being performed. McAfee DLP Managerdoes not display any CPU activity, because it serves only as a collection point for the data. Othermachines are capturing and indexing data and the processor indicates the CPU utilization. It shouldnot go over 70–80 percent.If registration seems to be taking a long time, try refreshing the page.246 McAfee Data Loss Prevention 9.2.2 Product Guide