I need some rules for preventing users from using some hardware devices.
When I'm reviewing event by event I'm able to see device ID's, as per attached screen.
However when I've tried to prepare query which would create list of ID's.
Do you have any advice how can I create queries which would return me list of device ID's.
In v9.0, there is a feature which deals with export of device events. And Events will be exported to CSV and all the details of the device parameters will be exported.
Preocedure is to filter out or select the device events for which you would like to capture the Device IDs and right click -> select Export events to CSV.
Please let me know if this solved your problem.
Where is the format for IMPORTING data into DLP 9.0?
User guide simply states:
Importing device parameters
In McAfee Host Data Loss Prevention software version 9.0, device parameters can be entered
from lists saved in CSV format. The list can be made by selecting multiple events inside the
DLP Monitor and exporting the device parameters (using the context menu) to a CSV file, one
comma separated row per event. Lists can also be created manually. See the online Help for
information on formatting the CSV file.
We dont have it installed yet, but we want one of our team working on compiling the .csv so that we will be ready to import once its online.