12.07.2015 Views

McAfee Data Loss Prevention 9.2.2 Product Guide

McAfee Data Loss Prevention 9.2.2 Product Guide

McAfee Data Loss Prevention 9.2.2 Product Guide

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Using <strong>McAfee</strong> DLP MonitorFind data by time, transmission method, or location 2Search for files by global time (GMT)When you set a Date/Time parameter in a search or rule, local time is automatically converted toGreenwich Mean Time (GMT). This default allows you to find files that might be time‐stamped at ornear the same time globally by creation, modification, or last accessed times.The date and time set on your DLP appliances is determined by the local time zone in which they wereinstalled.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Advanced Search.• On your <strong>McAfee</strong> DLP appliance, select Capture | Advanced Search.2 Open the Date/Time category and select File Creation Time, Last Modification Time, or File Last Accessed Time.3 Select an approximate time from the before/between/after menu.Select between to set both before and after delimiters.4 From the calendar icon, select a date, and set hour, minute and second times with the thumbwheelmenus.5 Click Search or Save as Rule.Search in a relative time frameThe search engine is able to locate files that are time‐stamped within a relative time frame.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Advanced Search.• On your <strong>McAfee</strong> DLP appliance, select Capture | Advanced Search.2 Open the Date/Time category.3 Select File Creation Time, File Last Accessed, or Last Modification Time and between then click the calendar iconto enter dates in the values field.Select before or after to get closer to a specific time.4 Select a time from the hour, minute and second menus.5 Click Search.Search by file creation timeSearch for files that were created at a particular time.The time zone of the <strong>McAfee</strong> DLP appliance determines the file creation time displayed.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> | DLP Reporting | Advanced Search.• On your <strong>McAfee</strong> DLP appliance, select Capture | Advanced Search.2 Open the Date/Time category.<strong>McAfee</strong> <strong>Data</strong> <strong>Loss</strong> <strong>Prevention</strong> <strong>9.2.2</strong> <strong>Product</strong> <strong>Guide</strong> 47

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!