McAfee Data Loss Prevention 9.2.1, Руководство по установке

Страница: 74 / 78

But if McAfee DLP Endpoint 9.1 is installed and digital rights management is not needed,
No compatibility
should be selected. This means that the new features in that release will be available in the network
product suite. Features like
Document Scan Scope
and
Password Protected Files
will appear in the user interface
only if the 9.1 version of the McAfee Agent client is accessible through McAfee DLP Manager.
Add an Agent Override Password
An
Agent Override
password must be defined before doing any McAfee DLP Endpoint task to ensure
encryption and decryption of evidence, and the possibility of reversing any default reactions.
A key must be used to unblock quarantined files, unlock and decrypt encrypted files, request
justification for blocked actions, or work around any other events that have been generated by McAfee
Agent. The administrator provides this password when appropriate.
For example, a unified rule might protect a certain group of financial files on certain network shares
and all endpoints. But because certain endpoint users will need read and write access to those files, it
might include a selected
Request Justification
checkbox in the
Data
‑
in
‑
Use
action rule that is applied to that
rule. As a result, when an authorized user opens the blocked file, he might be presented with a
Request
Justification
pop ‑ up that will allow the administrator to make an exception to the rule by providing the
password. (The specific process and action is determined by the administrator.)
Task
1
Open the
Agent Override Password
page in one of two ways:
• In ePolicy Orchestrator, select
Menu
|
Data Loss Prevention
|
DLP Sys Config
|
Endpoint Configuration
|
Miscellaneous
and click
Agent Override Password
.
2
Enter a password in the
Password
field and confirm it.
McAfee DLP Endpoint 9.2 requires strong passwords — 8 or more upper and lower case characters,
plus a number and a symbol.
3
Click
Submit
.
Set the manual tagging option
If you have administrative privileges, you can apply tag labels to allow trusted users to classify specific
documents . If the
Allow Manual Tagging
checkbox is selected during that process, the tag is visible to your
trusted users, who can use it to classify specific documents by applying the appropriate tag.
Before you begin
McAfee DLP Endpoint and its components must be set up on McAfee DLP Manager.
After they are created, manual tags are pushed to users at endpoints by the McAfee Agent client.
The ability to classify documents with tags encourages users to take independent action to protect files
within their areas of responsibility. For example, users at medical facilities might be trusted to apply
HIPAA tags to patient records that must be kept confidential by law.
If the
Allow Manual Tagging
checkbox is not selected, file tagging can still be done manually — but only by
administrative users, who can tag or remove files individually or in groups.
Task
1
Open the
Tag Labels
page in one of two ways:
• In ePolicy Orchestrator, select
Menu
|
Data Loss Prevention
|
DLP Sys Config
|
System Administration
|
Endpoint Configuration
|
Tag Labels
.
2
Select a tag.
6
Integrating McAfee DLP Endpoint into a unified policy system
Configuring McAfee DLP Endpoint on McAfee DLP Manager
74 McAfee Data Loss Prevention 9.2.1 Installation Guide