McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverOptimizing scanning with data classification 4McAfee DLP Discover includes OLAP tools that enable users to explore all aspects of the scanned data.Evaluating the contents of a repository or share before scanning makes it possible to invent newprotection strategies that will focus efforts more precisely on data at risk.The OLAP NavigatorThe OLAP Navigator displayed on the Predefined View and Task View pages provides tools that allow users tomanipulate classified data.The OLAP tools give you the ability to explore, drill down, chart, print and report classified data in aninfinite number of configurations.You must be authorized to view Data Classification results. An administrator must add that privilege to theyour user group under Discover Scan Permissions.Each of the attributes listed under Columns and Rows offer an opportunity to explore the classified dataproduced by the scan you are analyzing.After you have analyzed a view, you can clear it by clicking X.Table 4-13 OLAP toolsOLAP toolOLAP NavigatorFunctionDisplays potential rule hits using the classified data available for each.Drill position Offers the ability to drill down to finer granualarity data levels by clicking +.Show/Hide ChartChart ConfigurationConfigure Print SettingsPrint to PDFExport to ExcelUse the values to show or hide the default chart.Use chart settings to create a new chart.Use print settings to print a new chart.Save the results in a PDF report.Save the results in a CSV report.How the classification engine worksThe data classification engine operates on two levels: during scan operations, and on the McAfee DLPdevice.When inventory and classification scans run, the classification engine crawls the defined repository,reports the files and directory attributes (file name, size, path, etc.) found at that location, classifiesthem by file type, and reports the results in a several different predefined views.During a classification scan, the inventory phase is followed by fetching and classifying the contentthat is found in the repository. The classification engine then stores the existing information about thedata (metadata) in a classification database, and it is available on the Data Classification dashboard.The data can then be used to add refined Discover and Registration scans that allow targeting ofspecific content types and policies.Classification scans do not generate incidents on Data‐at‐Rest dashboards.McAfee Data Loss Prevention 9.2.2 Product Guide 87