Filtering traffic to be monitored using McAfee DLP Monitor
We are trying to reduce the traffic being monitored by DLP monitor appliance by enabling traffic rules under the policy "DLP Appliance Management 11.0.300 > McAfee DLP Monitor Settings > "
Even after applying this itseems all traffics are being monitored and incidents are been detected. Anyone have seen this working in your environment? We have raised a case with McAfee for the same but we are facing difficulties in getting response from team.
Example: All traffic with source port 80 should not be monitored by DLP monitor and thrown incidents incase if it matches the DLP rules configured.