McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP MonitorSearching for email files or IP addresses 2Find incidents related to geographic locations and web sitesTraffic to and from geographic locations or web sites might be reported in incidents.Find incidents by geographic locationFind incidents sent to or from other countries by searching for geographic locations.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting.• On your McAfee DLP appliance, select Capture.2 Open the regional pop‐up menu in one of two ways:• On the Basic Search menu, select GeoIP Location, click ?, and select a region or country from theregional pop‐up menu.• On the Advanced Search page, open the Source/Destination category, select GeoIP Location, click ?, selecta region or country from the regional pop‐up menu, and click Apply.3 Click Search.Find incidents related to web sitesFind incidents related to web sites by using URLs in queries.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Source/Destination category.3 Select URL | is any of and type one or more URLs.4 Click Search.Searching for email files or IP addressesYou can search for files using email, file, or IP address parameters.Finding emailEmail objects are stored in capture databases as separate tokens. Search for one or more componentsof an email address (user, host or domain names) to produce related results.Because email attributes are captured, email can also be found by port, protocol, attachment, sender,recipient, cc, or bcc.Email addresses or domain names that contain numbers are searchable only if they are in theaddressing, subject, cc, or bcc fields. Only alphanumeric characters are supported in the body of emailmessages.In rare cases, email addresses that are not present in SMTP mail might be displayed in strikeout modein the highlighting on the dashboard.McAfee Data Loss Prevention 9.2.2 Product Guide 51