McAfee Data Loss Prevention 9.2.2 Product Guide

2Using McAfee DLP MonitorSearching for email files or IP addressesTask1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Protocol category.3 Click ?.4 Open the Mail Protocols category.5 Select one or more email types.6 Click Apply.7 Click Search or Save as Rule.Find email by sender or recipientFind email sent or received by specific users by setting the sender or recipient condition on the EmailAddress menu, then entering an email address in the value field.If you want to identify both senders and recipients, select Email Address | is any of from the Source/Destination category.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Source/Destination category.3 Select Email Address | sender is any of or Email Address | recipient is any of.Use sender is none of or recipient is none of to exclude specific addresses.Use + to add more address parameters if you want to identify multiple sources and destinations.4 Enter one or more email address in the value field.5 Click Search or Save as Rule.Find email by subjectFind email about specific topics by searching for the text contained in subject lines.Click + to add an email address parameter if you want to narrow the query to a specific sender orrecipient.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting.• On your McAfee DLP appliance, select Capture.54 McAfee Data Loss Prevention 9.2.2 Product Guide