background image

The McAfee DLP appliance is installed and registered to McAfee ePO.

9

Post-setup tasks

For more information on these tasks, see the product guide.

McAfee DLP appliances

1

Configure an evidence server to store the files that trigger a rule.

2

Configure one or more syslog servers if required.

3

Enable relevant predefined policies and rules.

4

Create additional classifications, policies, and rules to detect potential data loss incidents.

5

Confirm that incidents are recorded in the 

DLP Incident Manager

.

McAfee DLP Prevent appliances

For McAfee DLP Prevent appliances that analyze email traffic:

1

Verify connectivity and mail flow between the mail transfer agent (MTA) server and the McAfee DLP

Prevent appliance.

2

Confirm that the X-RCIS-Action: Allow header is added to received email.

For McAfee DLP Prevent appliances that analyze web traffic, verify connectivity between the web proxy server

and the appliance.

McAfee DLP Monitor appliances

Generate some traffic that the configured network tap or SPAN can see.

6

Summary of Contents for Data Loss Prevention Prevent

Page 1: ... a Go to the ServicePortal at https support mcafee com and click the Knowledge Center tab b In the Knowledge Base pane under Content Source click Product Documentation c Select a product and version then click Search to display a list of documents d Download these documents McAfee Data Loss Prevention Product Guide Information about configuration maintenance and troubleshooting McAfee Data Loss Pr...

Page 2: ...port 1 6 Ethernet port Unused If the appliance has a fiber NIC For McAfee DLP Prevent the fiber port becomes LAN1 For McAfee DLP Monitor the fiber port becomes Capture port 1 On some 4400 models the capture ports might be on a slotted NIC instead of on the motherboard In this case these two ports are swapped over Figure 2 Model 5500 appliance port configuration 1 Ethernet port or fiber port Unused...

Page 3: ...te access port RMM 5 Install the extensions Prepare the McAfee ePO server for integration with McAfee DLP Appliance Management For information about manually installing the extensions see the product guide For details about product features usage and best practices click or Help a In McAfee ePO select Menu Software Software Manager b In the left pane expand Software by Label and select Data Loss P...

Page 4: ... Instructions are available in the hardware guide By default each appliance is configured with these IP addresses after installation McAfee DLP Prevent LAN1 10 1 1 108 24 Use the LAN1 network for SMTP or ICAP traffic You can also use it for management traffic McAfee DLP Monitor LAN1 10 1 1 108 24 Use the LAN1 network for management traffic OOB 10 1 3 108 24 Optional Use the out of band OOB network...

Page 5: ...rive 4400 appliances only Integrated CD drive Virtual CD drive using the remote management module RMM 2 Insert or connect the media to the appliance 3 Turn on the appliance 4 Before the operating system starts press F6 for the boot menu and select the external media R3c0n3x is the BIOS password for 4400 appliances b Follow the on screen prompts When the installation completes the appliance restart...

Page 6: ...otential data loss incidents 5 Confirm that incidents are recorded in the DLP Incident Manager McAfee DLP Prevent appliances For McAfee DLP Prevent appliances that analyze email traffic 1 Verify connectivity and mail flow between the mail transfer agent MTA server and the McAfee DLP Prevent appliance 2 Confirm that the X RCIS Action Allow header is added to received email For McAfee DLP Prevent ap...

Page 7: ...7 ...

Page 8: ...cAfee LLC McAfee and the McAfee logo are trademarks or registered trademarks of McAfee LLC or its subsidiaries in the US and other countries Other marks and brands may be claimed as the property of others 8 700 4558A00 ...

Reviews: