McAfee Data Loss Prevention 9.2.2 Product Guide

4Using McAfee DLP DiscoverManaging scansDefining scansScans can be run to inventory and register documents, discover incidents, or classify data for anoptimized scan.The parameters that have to be defined depend on the scan type.Classification scans are recommended before running Discover or Registration scans, because theyprovide information that allows you to focus on the most significant data types.The scan definition must include the credentials to be used to access the repository. If the scan is notstarted manually, a scan schedule that determines when the scan will be run will also be needed.Set up scansDepending on your objective, you can set up scans that inventory, register, discover or classify data infile system or database repositories. Results from the classification scan type can be used to createoptimized scans that produce better results faster.Before you beginAnalyze your objective so that you will know what kind of scan to run. You will also needcredentials for the file system or database repository you are crawling.Integrated Windows authentication is not supported for Microsoft SQL Server. If you arescanning a database server of this type, you must create an MS SQL Server user with thecorrect credentials.It is a good idea to include the scan mode in the name of a scan. For example, a name likeFinance_registration will help you to remember what the scan does when it is used in a rule.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 In the Actions tab, select New.3 Type in a scan task name and optional description.4 From the Repository Type menu, select a file system or database type.The user interface offers different options for each type.5 From the Credential menu, select from the list of authentication parameters that allow access to therepository, or click New to add a new one to the list.6 From the Schedule menu, select from the list default schedules, or click New to create a new one.7 From the Mode menu, select one of the four scan types.8 Under Devices, select the appliance from which the scan will be run. Select None if you want to save ascan without deploying it.9 In the Node Definition tab, define the server that is the target of your scan. Depending on the filesystem or database selected, you might enter a URL to define an FTP or web server instead of IPaddresses or host names.94 McAfee Data Loss Prevention 9.2.2 Product Guide