cancel
Showing results for 
Search instead for 
Did you mean: 

DLP to prevent storage devices

Hello All

 

I am running EPO 5.9.1 and need some assistance creating a policy that blocks all storage devices from Windows devices that are saved in a particular group.  I assume I will need to use the DLP policy.  If someone could provide some assistance on how this policy should be built that would be greatly appreciated.

Regards

1 Reply
McAfee Employee DLP_RS
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: DLP to prevent storage devices

Please find the suggestions below.

I am running EPO 5.9.1 and need some assistance creating a policy that blocks all storage devices from Windows devices that are saved in a particular group. 

=> First we need to find the way a connected storage device is identified by Windows Device Manager. Once we know the way it is identified, Device Definitions can be created and included in the respective rules. We already have in-bulit templates like Plug and Play device definitions, Removable Storage device definitions, Fixed Hard Drives and others. If the device is one of these definitions then rules will take an action to block, monitor..

Few KB articles I would like to refer--

How to block all USB drives and set exclusions for specific USB drives using Data Loss Prevention Endpoint

https://kc.mcafee.com/corporate/index?page=content&id=KB86007

How to manage Apple iPhone and iPad devices using Data Loss Prevention Endpoint

https://kc.mcafee.com/corporate/index?page=content&id=KB77769

Few documents-

https://www.mcafee.com/enterprise/en-in/products/total-protection-for-data-loss-prevention.html

https://www.mcafee.com/enterprise/en-us/assets/solution-briefs/sb-total-protection-for-dlp.pdf

I assume I will need to use the DLP policy.  If someone could provide some assistance on how this policy should be built that would be greatly appreciated.

=> Some YouTube links

McAfee DLPE 11.x - Chapter 1: Device control rules

https://www.youtube.com/watch?v=-AI5UyeoeJ8

McAfee DLPE 11.x - Chapter 2: Modifying rules

https://www.youtube.com/watch?v=7OwsnLgLT6I

 

DLP product manual

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/28000/PD28028/en_US/...

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community