McAfee DTP-165C-DPVG Installation Guide - Page 54

Creating and configuring repository folders, Con folders on Windows 2003 Server

Page 54 highlights

6 Installing McAfee DLP Endpoint Repository folders • c:\dlp_resources\ • c:\dlp_resources\evidence • c:\dlp_resources\whitelist • Evidence folder - Certain protection rules allow for storing evidence, so you must designate, in advance, a place to put it. If, for example, an email is blocked, a copy of the email is placed in the Evidence folder. • Whitelist folder - Text fingerprints to be ignored by the DLP Endpoint are placed in a whitelist repository folder. An example is boilerplate text such as disclaimers or copyright. McAfee DLP Endpoint software saves time by skipping these chunks of text that are known to not include sensitive content. Creating and configuring repository folders McAfee Data Loss Prevention Endpoint software requires certain repository folders on the server. These folders must be created and configured before running the installer. Tasks • Configure folders on Windows 2003 Server on page 54 Configuration of the repository folders on Windows 2003 Server requires specific security settings. • Configure folders on Windows 2008 Server on page 55 Configuration of the repository folders on Windows 2008 Server requires specific security settings. Configure folders on Windows 2003 Server Configuration of the repository folders on Windows 2003 Server requires specific security settings. Before you begin Create the evidence and whitelist folders, as described in Before you install the extension. Both folder are configured in the same manner. Repeat this task for each folder. Task 1 Right-click the evidence / whitelist folder and select Sharing and Security. 2 In the dialog box that appears, select Share this folder. Modify Share name to evidence$ / whitelist$. The $ ensures that the share is hidden. 3 Click the Security tab, then click Advanced. 4 On the Permissions tab of the Advanced Security Settings for evidence dialog box, deselect Allow inheritable permissions. A confirmation message explains the effect this change will have on the folder. 5 Click Remove. The Permissions tab on the Advanced Security Settings dialog box shows all permissions eliminated except administrators. Setting permissions for administrators is required for the whitelist folder. It is optional for the evidence folder, but can be added as a security precaution. Alternately, you can add permissions only for those administrators who deploy policies. 54 McAfee Data Loss Prevention 9.2.0 Installation Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76

c:\dlp_resources\
c:\dlp_resources\evidence
c:\dlp_resources\whitelist
Evidence folder
— Certain protection rules allow for storing evidence, so you must designate, in
advance, a place to put it. If, for example, an email is blocked, a copy of the email is placed in the
Evidence folder.
Whitelist folder
— Text fingerprints to be ignored by the DLP Endpoint are placed in a
whitelist
repository
folder. An example is boilerplate text such as disclaimers or copyright. McAfee DLP
Endpoint software saves time by skipping these chunks of text that are known to not include
sensitive content.
Creating and configuring repository folders
McAfee Data Loss Prevention Endpoint software requires certain repository folders on the server.
These folders must be created and configured before running the installer.
Tasks
Configure folders on Windows 2003 Server
on page 54
Configuration of the repository folders on Windows 2003 Server requires specific security
settings.
Configure folders on Windows 2008 Server
on page 55
Configuration of the repository folders on Windows 2008 Server requires specific security
settings.
Configure folders on Windows 2003 Server
Configuration of the repository folders on Windows 2003 Server requires specific security settings.
Before you begin
Create the evidence and whitelist folders, as described in
Before you install the extension
.
Both folder are configured in the same manner. Repeat this task for each folder.
Task
1
Right-click the evidence / whitelist folder and select
Sharing and Security
.
2
In the dialog box that appears, select
Share this folder
. Modify
Share name
to
evidence$ / whitelist$
.
The $ ensures that the share is hidden.
3
Click the
Security
tab, then click
Advanced
.
4
On the
Permissions
tab of the
Advanced Security Settings for evidence
dialog box, deselect
Allow inheritable
permissions
.
A confirmation message explains the effect this change will have on the folder.
5
Click
Remove
. The Permissions tab on the Advanced Security Settings dialog box shows all
permissions eliminated except administrators.
Setting permissions for administrators is required for the whitelist folder. It is optional for the
evidence folder, but can be added as a security precaution. Alternately, you can add permissions
only for those administrators who deploy policies.
6
Installing McAfee DLP Endpoint
Repository folders
54
McAfee Data Loss Prevention 9.2.0
Installation Guide