cancel
Showing results for 
Search instead for 
Did you mean: 

DLP Reporting

How can I create a report for McAfee DLP exempted USB storage devices to see if they have any violation?

1 Reply

Re: DLP Reporting

Hi,

I assume you are asking failed unauthorise usb being plug in (example)

If you had monitor rules that violates the USB Storage Devices they should have a failed information on your monitor rules.

Create a queries based on that DLP rules and the information type(failed usb events) to be generated out. and delivery depends what file type and the mode of deliver to SMTP etc(provided is being configured).

In simple term. If you can create queries appear on dashedboard over there. I am sure you can generate out the report. Report is generate out using the same queries.

Message was edited by: reduakari on 1/2/13 12:14:51 AM CST