1 Reply Latest reply: Jan 2, 2013 12:14 AM by reduakari RSS

    DLP Reporting

    romardy

      How can I create a report for McAfee DLP exempted USB storage devices to see if they have any violation?

        • 1. Re: DLP Reporting
          reduakari

          Hi,

           

          I assume you are asking failed unauthorise usb being plug in (example)

           

          If you had monitor rules that violates the USB Storage Devices they should have a failed information on your monitor rules.

           

          Create a queries based on that DLP rules and the information type(failed usb events) to be generated out. and delivery depends what file type and the mode of deliver to SMTP etc(provided is being configured).

           

          In simple term. If you can create queries appear on dashedboard over there. I am sure you can generate out the report. Report is generate out using the same queries.

           

          Message was edited by: reduakari on 1/2/13 12:14:51 AM CST