McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP MonitorSearching for email files or IP addresses 2Task1 Log on to the back end of the McAfee DLP Manager or McAfee DLP Monitor appliance.2 Go to the /usr/bin directory on the Model 4400 appliance and locate the sha2sum utility.3 Type in the command line utility to generate a signature.# sha256sum 4 Select and copy the resulting hexadecimal number.5 Open a browser and launch the McAfee DLP user interface. Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies.• On your McAfee DLP appliance, select Policies.6 Click a policy to open it for editing, then click a rule.7 On the Edit Rule page, open the File Information category.8 Select Signature | is any of and paste the hexadecimal number in the value field.9 Click Save.When the rule runs, the file will be detected and displayed on the McAfee DLP dashboards."Rule modification completed successfully" is displayed on the Edit Policy page.Find common names in different organizational unitsLarge enterprises sometimes have identical organizational names in multiple levels of the directorytree. When a query matches identical names in many different organizational units, you can locate theright one in the Distinguished Name column.If you want to find a file name that is duplicated across organizational units in a directory server, youcan determine the correct OU level by selecting it from the retrieved data.For example, after selecting the right unit from the list, you might pair it with an email address tonarrow the result to an individual in the unit.McAfee Data Loss Prevention 9.2.2 Product Guide 57