cancel
Showing results for 
Search instead for 
Did you mean: 
kmc
Level 12
Report Inappropriate Content
Message 1 of 4

DLP rule creation

Hi,


Please help me to create a new DLP category rule that alerts ePO when files have been transferred to an external device.


Thanks in advance


Regards,

Kotresha

3 Replies

Re: DLP rule creation

Hi kmc,

It will depend on your data-sources. Do you already have DLP data, such as McAfee DLP? If so, you could simply push your DLP events from ePO to the SIEM.

And then get inspired by the DLP dashboards provided in ePO to replicate them into ESM, where you create alerts.

kmc
Level 12
Report Inappropriate Content
Message 3 of 4

Re: DLP rule creation

Hi Gulillaume,

Thanks for your response, however i want to create that the rule in epo not in SIEM.

Re: DLP rule creation

hi kmc,

Sorry for the misunderstanding. I would suggest you to ask your question here, then :

So you will be in touch with the right community

Regards,G.