McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP DiscoverManaging scans 4Examples• Absolute Directory Path > equals > C$/Eng/Network/Drawings• File Pattern > equals > *.jpg• File Owner > equals > bjones• File Size > range > 1024–5000 (requires numbers expressed in bytes)• File Creation Time > between > 16:30:00 and 17:00:00• Last Modification Time > after > 13:30:00• Last accessed > before > 17:00:006 Click Save.Define shares to be scannedYou can define shares to be scanned only on CIFS, NFS and Documentum repositories.Before you beginWhen you scan all shares, you do not have to define a filter. The default filter will always beset to crawl all the shares on the system from the base directory (root).Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.2 After adding a new scan operation and defining the target in the Node Definitions tab, click the Filterstab, open the Filter category, then the Shares menu.Equals is the only choice for finding shares; negative values cannot be used.3 Select a condition.The All condition is the default, indicating that all shares will be scanned.For example, Share | equals C$.If you select Exact Match or Pattern, enter a value that defines a specific directory or file pattern on theshare.4 Click Save.Define folders to be scannedYou can define folders to be scanned only on CIFS, NFS and Documentum repositories.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Classify | Discover Scan Operations | ScanOperations.• On your McAfee DLP appliance, select Classify | Discover Scan Operations | Scan Operations.McAfee Data Loss Prevention 9.2.2 Product Guide 99