Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
775 Views 1 Reply Latest reply: Jan 2, 2013 12:14 AM by reduakari RSS
romardy Apprentice 116 posts since
Sep 26, 2012
Currently Being Moderated

Dec 18, 2012 6:28 PM

DLP Reporting

How can I create a report for McAfee DLP exempted USB storage devices to see if they have any violation?

  • reduakari Newcomer 26 posts since
    Oct 12, 2011
    Currently Being Moderated
    1. Jan 2, 2013 12:14 AM (in response to romardy)
    Re: DLP Reporting

    Hi,

     

    I assume you are asking failed unauthorise usb being plug in (example)

     

    If you had monitor rules that violates the USB Storage Devices they should have a failed information on your monitor rules.

     

    Create a queries based on that DLP rules and the information type(failed usb events) to be generated out. and delivery depends what file type and the mode of deliver to SMTP etc(provided is being configured).

     

    In simple term. If you can create queries appear on dashedboard over there. I am sure you can generate out the report. Report is generate out using the same queries.

     

    Message was edited by: reduakari on 1/2/13 12:14:51 AM CST

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points