McAfee Data Loss Prevention 9.2.2 Product Guide

4Using McAfee DLP DiscoverTypical scenariosTask1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies | Registered Documents.• On your McAfee DLP appliance, select Policies | Registered Documents.2 From the Actions menu, select Upload New File.3 Browse to locate a sensitive file that must be protected.Mozilla Firefox 3.5 will not include the path to the uploaded document unless you reconfigure itbefore scanning.4 Select a policy and rule to guide the search.For example, select the Financial and Security Compliance policy and the Financial StatementDocuments rule to protect a document that contains sensitive financial information.5 If more documents need protection, select Save & Upload Another and repeat the process.6 Click Save.7 After some time, check the Data‐at‐Rest vector on your McAfee DLP Manager dashboard. For fullcoverage, add the content to a rule and schedule it to run at regular intervals.Remember to select an appropriate time filter. The system cannot track data before it wasuploaded.Control copies of sensitive documentsConfidential documents often proliferate over networks, because employees can copy or move them toinsecure locations to work on them, or share them with other staff members. You can find sensitivedocuments that have been copied or moved by using their signatures.Task1 Create a Discover scan to find the file on the targeted repository.The scan will produce a list of incidents on the Data‐at‐Rest dashboard.2 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.3 Select Data‐at‐Rest from the vector thumbwheel and click Columns.4 Add the Signature and Path columns to your dashboard, then click Apply.5 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Policies | Registered Documents.• On your McAfee DLP appliance, select Policies | Registered Documents.6 On the Web Upload page, click View to locate the signature number, and copy it.7 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.74 McAfee Data Loss Prevention 9.2.2 Product Guide