McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP MonitorFind data by time, transmission method, or location 2Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Protocol category.3 Select Port | source is any of and enter a port number range in the values field.4 Click + to add a destination parameter.5 Select Port | destination is any of and enter a port number range in the values field.6 Click Search.Search by excluding portsExclude ports from a query to prevent incidents using them from appearing in search results.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Protocol category.3 Select Port | source is none of and enter a port number in the values field.4 Click + to add a destination parameter.5 Select Port | destination is none of and enter a port number in the values field.6 Click Search.Common port assignmentsWell‐known ports are commonly associated with specific types of traffic, and can be used to searchnetwork data.The list in this table contains only a few of the well‐known ports. IANA (Internet Assigned NumbersAuthority) updates are online at http://www.iana.org/assignments/port‐numbers.Table 2-21 Common port assignmentsPort numberService20/21 FTP22 SSH23 Telnet25 SMTP80 HTTP110 POP3123 NTP143 IMAPMcAfee Data Loss Prevention 9.2.2 Product Guide 49