McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverManaging scans 4Table 4-15 Scan actions (continued)Scan action DescriptionStartStopAbortRescanDeleteStarts the scan.Stops the scan.Stops the scan abruptly without processing the fetched files.Resubmits the scan for tasks that are not running, but are in a Ready state; re‐fetchesfiles and re‐analyzes all content, and generates new incidents.Deletes the scan.Preparing to scanBefore creating a scan, create a framework for your protection strategy by considering the followingparameters:• Scan mode (Inventory, Registration, Discover or Classification)• Credentials to access the repository• Database type and version (for database scans)• IP address, subnet, or range of the targeted repositories, including required ports• Login database or SID and SSL certificate (for database scans)• File systems to be scanned• Schedule for the scan• Configuration of firewalls• Bandwidth to be used• Projected scan loadMcAfee DLP Discover scan types support inventory, registration, discovery, and classification ofsensitive data. These four scan types are used to crawl network file systems or database repositories.Table 4-16 Types of scansScan typeClassificationscanDescriptionUse a classification scan to get an understanding of the type of data that exists inthe repository you are targeting. This scan type sorts crawled data into differentcontent types and analyzes attributes like file size, location, type, and conceptsthat might be triggered during discovery. The results of this scan can help you tolearn about potential rule violations before they are reported, enabling you tocreate more focused Discover or Registration optimized scans.Classification scans cannot be performed on database repositories.Inventory scanUse this scan to crawl all directories and files residing on a targeted repository andgenerate an index, or manifest. For databases, an inventory scan produces aschema ‐ the database structure and number of records. It can also help you todecide what needs protection before going ahead with a registration or discoveryscan. The inventory scan also classifies the crawled data based on file extensions.McAfee Data Loss Prevention 9.2.2 Product Guide 91