McAfee Data Loss Prevention 9.2.2 Product Guide

4Using McAfee DLP DiscoverCrawling databasesDatabase terminologyTerminology that identifies database properties is determined by database types, which vary byvendor. McAfee DLP Discover uses the appropriate object hierarchy when setting up filtering optionsfor scans.The object hierarchy used by the supported database types varies. The five filtering componentssupported by McAfee DLP Discover are catalogs, schemas, tables, columns, and records and rows.Schemas are collections of database objects that are owned or have been created by a particular user,and catalogs are collections of related schemas.But these terms are used interchangeably in MySQL databases, and Microsoft SQL Server defines acatalog/schema model for data stores. In this model, catalogs contain schemas. By contrast, Oracleand DB2 database use only the term schemas.Whether the term schema or catalog is used, all databases contain tables, which contain records androws. McAfee DLP Discover database scanning extends to the records and rows level.Types of database repositories supportedIn addition to large volumes of unstructured data in file system repositories, McAfee DLP Discoverprotects databases containing up to ten million records.McAfee DLP Discover supports JDBC (java database connectivity), and crawls the following structureddatabases:• DB2, versions 5x iSeries, 6.1 iSeries, 7.x‐9.x• MS SQL Server, versions 2000, 2005, 2008, 7.0, MSDE 2000• MySQL (Enterprise), versions 5.0.x, 5.1Only the Enterprise version of MySQL is supported. MySQL CE (Community Edition) cannot be usedfor a database scan task because the JDBC driver used in McAfee DLP products does not supportfree GPL (General Public License) database versions.• Oracle, versions 8i, 9i, 10g, 11gHow database content is registeredDatabase content is registered by uploading structured data, scanning a database, or deploying rulesthat identify sensitive data during the discovery process.You can use McAfee DLP Discover to register database content using one of three methods.• Upload data in structured format on the Web Upload page.• Create a Registration database scan on the Scan Operations page• Embed the DBReg attribute in one or more rules on the Edit Rule page.The structured data found can be saved to your desktop and uploaded, so that it can be used insubsequent scans.Register structured data by uploadingRegister structured data found in a database by uploading it to McAfee DLP Discover. You can use theregistered objects to detect similar content in other repositories.If you use McAfee DLP Manager to upload structured data, it will automatically be registered on allmanaged devices.80 McAfee Data Loss Prevention 9.2.2 Product Guide