Configure Mcafee Agent On Epolicy Orchestrator; Add An Evidence Folder On Epolicy Orchestrator - McAfee DTP-1650-MGRA - Network DLP Manager 1650 Appliance Installation Manual

Configure McAfee Agent on ePolicy Orchestrator

You must add an evidence folder on ePolicy Orchestrator to collect the events forwarded by the McAfee
Agent client, then configure essential features to enable McAfee DLP Endpoint functionality through
McAfee DLP Manager.
Task
In the ePolicy Orchestrator header, select Menu | Policy | Policy Catalog.
1
From the Product menu, select Data Loss Prevention 9.2: Policies.
2
From the McAfee Default Client Configuration.
3
After you name the duplicate and select it, the Settings page appears.
In the Evidence tab, type the UNC Path of the evidence folder share and folder name.
4
\\server name\evidence
The same server will also be entered on the McAfee DLP Manager Add New Evidence Server page.
Select Copy evidence using NETWORK SERVICE or logged on user.
5
In the Evidence Replication section, select the Evidence and Hit Highlighting checkboxes.
6
Show abbreviated hits appears in the associated field.
Enabling this option allows users to easily see matching text in the events reported to the McAfee
DLP Manager Data‑in‑Use dashboards.
In the Security tab, type in a list of authorized users and groups to enable manual tagging of files
7
on agent machines.
For example, type in Everyone to give Manual Tagging Authorization to all users.
This sets up the agent to support manual tagging through McAfee DLP Manager. Selecting the Allow
Manual Tagging checkbox when creating tags on the Endpoint Configuration page makes the tags visible to
trusted users, who can use them to classify documents on their desktops.
Click Save.
8

Add an evidence folder on ePolicy Orchestrator

To collect the events forwarded by the McAfee Agent client, add an evidence folder on ePolicy
Orchestrator.
If an evidence folder is not already installed on ePolicy Orchestrator, you must add one to
communicate with the evidence folder on McAfee DLP Manager.
Task
In the ePolicy Orchestrator header, click Policy Manager.
1
On the Agent Configuration page for the Data Loss Prevention product, click Edit Settings.
2
Under the Evidence setting, type the evidence folder share and folder name.
3
\\server name\evidence
This information will be entered on the McAfee DLP Manager Add New Evidence Server page.
Review the other agent settings and make changes as appropriate.
4
Click Save.
5
McAfee Data Loss Prevention 9.2.1
Integrating McAfee DLP Endpoint into a unified policy system
Setting up Unified DLP on ePolicy Orchestrator
6
Installation Guide 69