Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
1195 Views 9 Replies Latest reply: Jul 19, 2013 8:53 AM by minion RSS
minion Apprentice 199 posts since
Mar 8, 2013
Currently Being Moderated

Jul 18, 2013 1:35 AM

Lockdown pc with DLP 9.3

Hi guys,

 

I have been reading the installation and product guides, followed steps to create device rules etc. but just can't get to lockdown pc, block usb ports, etc. This is my first time configuring this, any tips on how to get started? I managed to get DLP endpoint installed on the pc now for blocking externals, shares, printers...

 

Also.. i created devices class for the pc with GUID to manage this pc with device rule to block USB devices

 

Message was edited by: minion on 7/18/13 12:55:49 AM CDT

 

Message was edited by: minion on 7/18/13 1:35:17 AM CDT
  • phreeze Newcomer 11 posts since
    Feb 28, 2013
    Currently Being Moderated
    1. Jul 18, 2013 1:46 AM (in response to minion)
    Re: Lockdown pc with DLP 9.3

    what do you mean by lockdown PC ?

     

    Blocking USB ports is relative: if you completey block the USB ports, you block your keyboard, mouse etc.

     

    Blocking STORAGE devices is the most used way. There's KBs an tutorials from MA, https://kc.mcafee.com/corporate/index?page=content&id=KB60861

     

    First create a rule that blocks all storage devices.

    Create a definition of you USB stick

    go to the created rule, exclude this definition.

  • cnorris McAfee SME 39 posts since
    Nov 3, 2009
    Currently Being Moderated
    6. Jul 18, 2013 5:14 AM (in response to minion)
    Re: Lockdown pc with DLP 9.3

    Hello minion,

     

    So, first of all have a read of this doc: http://mcaf.ee/0dav5 pages 114 and 115 which walks through using device rules for plug and play and removable storage. You may need both types of rule to cover your devices.

     

    On page 150 it covers the Incident Manager and Operation Events console that replaced the DLP Monitor.

     

    If you would like us to look at your policy please attach it here and we'll give you some tips.


    Best Regards

    Chris Norris, CISSP
    McAfee Tier III Support Engineer
    Data Loss Prevention

  • cnorris McAfee SME 39 posts since
    Nov 3, 2009
    Currently Being Moderated
    8. Jul 19, 2013 4:48 AM (in response to minion)
    Re: Lockdown pc with DLP 9.3

    Answered via PM

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points