cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Monitor ITAR content copied to removable device

Jump to solution

Hello

Just how does DLP 'know' information is ITAR content or not? I am looking to use the generic DLP policy rule template, and need to know how it is performing the task.

2 Solutions

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Monitor ITAR content copied to removable device

Jump to solution

Hello,

Thank you for posting here!

DLP has a built-in dictionary definition for ITAR called "International Traffic in Arms Regulations (ITAR)". Since this is a dictionary definition, the intention would be to look for specific words or phrases that are related to ITAR. The built-in definition has some default configurations. The scores for each word/phrase is 1 which means they are all equally weighted. Additionally, both the "starts with" and "ends with" checked boxes are selected meaning that the entire phrase (if there's more than one word) has to be matched. If you select "One of (or)" as the comparison in the classification configuration and use the built-in dictionary definition, the content being analyzed by the DLP agent would only need to contain one of the words/phrases contained in the definition. 

Please let us know if that answers your question. We'll be happy to assist further if needed!

View solution in original post

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Monitor ITAR content copied to removable device

Jump to solution

Hi @skeating ,

You can find it here,

ITAR.PNG

 

Thank you.

Regards,
Jithendran S
McAfee Employee

View solution in original post

4 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Monitor ITAR content copied to removable device

Jump to solution

Hello,

Thank you for posting here!

DLP has a built-in dictionary definition for ITAR called "International Traffic in Arms Regulations (ITAR)". Since this is a dictionary definition, the intention would be to look for specific words or phrases that are related to ITAR. The built-in definition has some default configurations. The scores for each word/phrase is 1 which means they are all equally weighted. Additionally, both the "starts with" and "ends with" checked boxes are selected meaning that the entire phrase (if there's more than one word) has to be matched. If you select "One of (or)" as the comparison in the classification configuration and use the built-in dictionary definition, the content being analyzed by the DLP agent would only need to contain one of the words/phrases contained in the definition. 

Please let us know if that answers your question. We'll be happy to assist further if needed!

View solution in original post

Highlighted

Re: Monitor ITAR content copied to removable device

Jump to solution

I looked in the Definitions section of the DLP Policy Manager, but did not see the one you sent a screenshot of. Where should I find that?

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Monitor ITAR content copied to removable device

Jump to solution

Hi @skeating ,

You can find it here,

ITAR.PNG

 

Thank you.

Regards,
Jithendran S
McAfee Employee

View solution in original post

Highlighted

Re: Monitor ITAR content copied to removable device

Jump to solution

Thanks for the information.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community