cancel
Showing results for 
Search instead for 
Did you mean: 

DLP 9.3 monitor web uploads

We have just started to test DLP 9.3 among some of the IT machines and are trying to get to a point where we can monitor when people upload files to the web (mainly for monitoring dropbox, yousendit etc)

After creating a web post protection rule it seems to flag up all manner of files constantly when just browsing web pages, what are we doing wrong and is this the correct rule type for what we are trying to do?

Thanks

5 Replies
sb905
Level 7
Report Inappropriate Content
Message 2 of 6

Re: DLP 9.3 monitor web uploads

How are you triggering the rule now - with a content category?  We've setup the same rule but we're only triggering when the content being uploaded matches the content category (custom defined dictionary/word list).  Works fine for us.

Re: DLP 9.3 monitor web uploads

We set it up initially very open ended in that it would just monitor all web posts (all web servers, all files) so that we can see when people upload company data to external sites but that doesnt work too great, basically pops up constantly when just browsing the web!

Think we need to maybe tie it down to some file types and test again, at the moment we've had to disable it and we're just testing it among ourselves before going anywhere near a live pilot.

bphang
Level 10
Report Inappropriate Content
Message 4 of 6

Re: DLP 9.3 monitor web uploads

WPPR monitors pretty much all HTTP_POST call.

Whenever you browse the net [intranet or internet] , HTTP_POST calls are made.

So you are bound to get tons of information.

Re: DLP 9.3 monitor web uploads

Any luck with this ?  I had the same issue...have just changed the rule to include certain file types and testing that now.

Highlighted

Re: DLP 9.3 monitor web uploads

By restricting file types to office files, pdf and image you will drdstically drop the number of files...I also excluded our intranet and sharepoint servers.

If you are concerned about certain domains you can also try and specify certain domains to drop them.

Cheers

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community