cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

DLP to prevent storage devices

Hello All

 

I am running EPO 5.9.1 and need some assistance creating a policy that blocks all storage devices from Windows devices that are saved in a particular group.  I assume I will need to use the DLP policy.  If someone could provide some assistance on how this policy should be built that would be greatly appreciated.

Regards

1 Reply
McAfee Employee DLP_RS
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: DLP to prevent storage devices

Please find the suggestions below.

I am running EPO 5.9.1 and need some assistance creating a policy that blocks all storage devices from Windows devices that are saved in a particular group. 

=> First we need to find the way a connected storage device is identified by Windows Device Manager. Once we know the way it is identified, Device Definitions can be created and included in the respective rules. We already have in-bulit templates like Plug and Play device definitions, Removable Storage device definitions, Fixed Hard Drives and others. If the device is one of these definitions then rules will take an action to block, monitor..

Few KB articles I would like to refer--

How to block all USB drives and set exclusions for specific USB drives using Data Loss Prevention Endpoint

https://kc.mcafee.com/corporate/index?page=content&id=KB86007

How to manage Apple iPhone and iPad devices using Data Loss Prevention Endpoint

https://kc.mcafee.com/corporate/index?page=content&id=KB77769

Few documents-

https://www.mcafee.com/enterprise/en-in/products/total-protection-for-data-loss-prevention.html

https://www.mcafee.com/enterprise/en-us/assets/solution-briefs/sb-total-protection-for-dlp.pdf

I assume I will need to use the DLP policy.  If someone could provide some assistance on how this policy should be built that would be greatly appreciated.

=> Some YouTube links

McAfee DLPE 11.x - Chapter 1: Device control rules

https://www.youtube.com/watch?v=-AI5UyeoeJ8

McAfee DLPE 11.x - Chapter 2: Modifying rules

https://www.youtube.com/watch?v=7OwsnLgLT6I

 

DLP product manual

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/28000/PD28028/en_US/...

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator