McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverManaging scans 4If you are using IP addresses or host names to define the repository, you have several choices.• If you are setting up a database crawl, you must provide a port number, database login, andSSL certificate options along with an IP address or host name.• If you are setting up a file system crawl, you must provide one or more IP addresses, a subnet,or a range.10 If you want to test the connection, select your device before clicking Test.11 Click Include to add the defined node to the Included list.If you want to exclude one or more addresses from an IP adress range or subnet, click Exclude.12 Click the Filters tab to define the exact location on the server that you want to scan.Depending on the repository type, you can filter by shares, folders, file properties on file systemservers, or catalogs, schemas, tables, columns, and records and rows on database servers.13 Click Browse to navigate to the location of the scan.Alternatively, open the Filter category and set the options manually. If you choose this method, youcan select Preserve to keep the original access times on the files. Otherwise, the operating systemwill change timestamps as the files are touched.14 Click the Advanced Options tab to set the amount of bandwidth dedicated to the scan, and to set upemail notifications to be sent when the scan starts or ends.• If you choose to throttle the bandwidth available to the scan, enter a value in Kbps or Mbps.• If you choose to send notifications of the start or end of a scanning process, you can usedynamic variables to provide scan details via email messages, but you cannot customize subjectfields. There might be a lag of a few minutes between conclusion of the task and the posting ofemail notification, and file processing might continue after notification.15 The next steps depend on what type of scan you are planning.• If you are planning an Inventory or Classification scan, configuration is complete.• If you are planning a Registration or Data Match scan of a file system or database, click theRegistration tab and select the Signature Type and Target Devices.• If you are planning a Discover scan, click the Policies tab and select policies whose rules will beapplied against data at rest in the defined repositories.16 Click Save.Filter scans by browsingYou can set the shares, folders and file properties to be scanned manually, or you can click Browse toset them by pointing and clicking.Before you beginBefore filtering, you must identify the file system or database that contains the target ofthe scan. Use the Node Definition tab to do this.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.McAfee Data Loss Prevention 9.2.2 Product Guide 95