McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverTypical scenarios 411 In the Advanced Options tab, set the bandwidth to be used for the scan, or accept the No Throttlingdefault.12 If you want to retain the timestamps on the files after scanning, select Preserve Last Access Time.13 If you want to send notification of start or end times, type in the associated email addresses.Set the dynamic variables in the Message fields if you want to provide specific information about thescan.14 In the Policies tab, select at least one policy to define the rules that are to be applied against thedata at rest in the repository, then click Add.15 Click Save.The Scan Operations page appears.16 Select the radio button of the scan to be run.17 From the Actions menu, select Start.The Status column will change to indicate that the scan is Initializing, then Running.18 Click Statistics to check the progress of the scan.Create a scan that runs only when started manuallyWhen you create a scan, a Schedule parameter must be included. But the default setting is none, and ifyou accept it, you must run the scan manually.Task1 Create and save a scan operation with Schedule none and a Device selected.In the Advance Notification tab, provide email addresses so you will know when the scan starts andstops.2 On the Scan Operations page, click the radio button of the scan and select Activate from the Actionsmenu.Only scans that have been deployed on a McAfee DLP Discover appliance can be activated.The Status column changes from Inactive to Ready.3 From the Actions menu, select Start.The Status column changes from Ready to Initializing, then Running.4 Click Statistics to monitor the progress of the scan.When the scan completes, the Status column changes from Running to Ready.Identify and track sensitive documentsWhen you upload a document to McAfee DLP Discover, a series of overlapping tiles are givenhexadecimal numbers that stamp each segment with a unique identity. Even if words are transposed,or contents differ by a few lines of text, each component of the document can be tracked.If you can't upload all of your sensitive data because you can't identify it all, run a Discover scan thatapplies a generic set of rules against the data in your repository. You can set it up so that it willgenerate incidents that violate many different policies, and when you evaluate the results you candevise a more targeted strategy.McAfee Data Loss Prevention 9.2.2 Product Guide 73