McAfee Data Loss Prevention 9.2.2 Product Guide

Managing McAfee DLP systemsAdding servers to McAfee DLP systems 13• UserCountry • UserOrganization• UserEmail • Network printer• UserGroups • Network path• UserID • Location Tag PathAdd columns to display user attributesAdd columns to display the relevant user attributes that were retrieved from your directory server.The columns available reflect the scope of data that might be available on the directory server. Not allof these parameters can be used for searching captured data or implementing rules. In an ad hocsearch, some attributes (user names, companies, email, managers, titles) might not be displayed.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Click Columns.3 From the Available list, select the relevant user attributes.If customized attributes are used on the directory server, they must be mapped to those in this list.4 Click Add to move them to the Selected box.5 Select the navigation buttons to determine the placement of the user attributes in the dashboarddisplay.6 Click Apply.Adding McAfee Logon Collector servers to McAfee DLPMcAfee DLP products use McAfee Logon Collector servers to identify remote users definitively.With McAfee Logon Collector, remote users are identified through SIDS (Security Identifiers) insteadof IP addresses, host names, or other user parameters that are subject to change.Connect McAfee Logon Collector to McAfee DLP ManagerConnect McAfee Logon Collector to McAfee DLP Manager by using certificates to authenticate them toeach other. When the process is concluded, an SSL connection is established between the servers.Task1 Open a web browser, type the IP address of the McAfee Logon Collector into the address bar, andlogon.2 From ePolicy Orchestrator, select Menu | Configuration | Server Settings | Identity Replication Certificate.3 Select and copy all text in the Base 64 field and paste it into a text editor.4 Add the following beginning and ending lines to the document.‐‐‐‐‐BEGIN CERTIFICATE‐‐‐‐‐‐‐‐‐‐END CERTIFICATE‐‐‐‐‐McAfee Data Loss Prevention 9.2.2 Product Guide 269