McAfee Data Loss Prevention 9.2.2 Product Guide
McAfee Data Loss Prevention 9.2.2 Product Guide
McAfee Data Loss Prevention 9.2.2 Product Guide
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
2Using <strong>McAfee</strong> DLP MonitorUse concepts to find incidentsUse concepts to find incidentsContent and session concepts can be used to find data patterns and content in data being exchangedbetween clients and servers.Tasks• Find incidents using content concepts on page 44Content concepts are collections of alphanumeric data that are relevant to a single issue, sothey can be used efficiently to find related incidents.• Build concept expressions with logical operators on page 44Content concepts are collections of data relevant to a single issue, so they are useful forfinding related incidents. If you add an expressions condition, you can narrow the conceptquery by using logical operators.• Exclude concepts to filter results on page 45When you exclude content concepts from a query, you can focus results by filtering outirrelevant collections of data.Find incidents using content conceptsContent concepts are collections of alphanumeric data that are relevant to a single issue, so they canbe used efficiently to find related incidents.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Advanced Search.• On your <strong>McAfee</strong> DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Concept | is any of and click ?.The Concepts window opens.4 Open categories and select concept checkboxes.5 Click Apply.6 Click Search.Build concept expressions with logical operatorsContent concepts are collections of data relevant to a single issue, so they are useful for findingrelated incidents. If you add an expressions condition, you can narrow the concept query by using logicaloperators.To match more than one pattern in a single search, enter concepts in the Value field using the concept:ConceptName format with logical operators.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Advanced Search.• On your <strong>McAfee</strong> DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Concept from the Element menu and expression from the Condition menu.44 <strong>McAfee</strong> <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> <strong>9.2.2</strong> <strong>Product</strong> <strong>Guide</strong>
Change language