McAfee Data Loss Prevention Prevent

Transcription

1 Quik Strt Guide Revision B MAfee Dt Loss Prevention Prevent version 10.x This quik strt guide provides high-level instrutions for setting up MAfee Dt Loss Prevention Prevent (MAfee DLP Prevent) hrdwre ppline. For omplete detils, or if you re setting up virtul ppline, see the MAfee Dt Loss Prevention Produt Guide for your version of 10.x. For setting up MAfee DLP ppline t version 9.3.x, see the produt guide for your version. 1 Chek your shipment Eh produt ships with ll the items needed to instll the ppline on network. Chek the ontents list to verify tht you reeived ll these items. 2 Downlod produt doumenttion d Go to the ServiePortl t nd lik the Knowledge Center t. In the Knowledge Bse pne under Content Soure, lik Produt Doumenttion. Selet produt nd version, then lik Serh to disply list of douments. Downlod these douments. MAfee Dt Loss Prevention Produt Guide MAfee Dt Loss Prevention Hrdwre Guide 3 Pln your onfigurtion Use the produt guide deployment hpter to pln the integrtion of MAfee DLP produts in your network. Fmilirize yourself with the MAfee DLP deployment options. Complete the deployment heklist. 1

2 4 Identify network ports Lote the network ports on your ppline. Unleled ports re not used. Figure 1 Model 4400 ppline port onfigurtion 1 Seril port 4 Remote ess port (RMM) 2 OOB port 5 Unused (Ethernet port 2) 3 LAN1 port 6 Unused (Ethernet port 3)* *If the ppline hs fier NIC, the LAN1 port is Ethernet port 3 (llout 6). Figure 2 Model 5500 ppline port onfigurtion 1 Unused (Ethernet port 3) 4 LAN1 2 Unused (Ethernet port 2)* 5 Seril port 3 OOB port 6 Remote ess port (RMM) *If the ppline hs fier NIC, the LAN1 port is Ethernet port 2 (llout 2). Figure 3 Model 6600 ppline port onfigurtion 2

3 1 LAN1 4 Seril port 2 Unused 5 Remote ess port (RMM) 3 OOB port 5 Instll the extensions Prepre MAfee epoliy Orhestrtor (MAfee epo ) for MAfee DLP Prevent integrtion. For informtion on mnully instlling the extensions, see the produt guide. For detils out produt fetures, usge, nd est prties, lik? or Help. In MAfee epo, selet Menu Softwre Softwre Mnger. In the left pne, expnd Softwre (y Lel) nd selet Dt Loss Prevention. Selet the entry for MAfee DLP Prevent. These extensions re inluded: MAfee DLP Common UI Appline Mngement Extension MAfee DLP Prevent d e Clik Chek In. Selet the hekox to ept the greement, then lik OK. 6 Configure network informtion Configure the DNS server, NTP server, nd Smrt Host in MAfee epo. For detils out produt fetures, usge, nd est prties, lik? or Help. d e f g In MAfee epo, selet Menu Poliy Poliy Ctlog. From the Produt drop-down list, selet Common Appline Mngement. Selet the My Defult poliy. Add the DNS server nd the NTP server, then lik Sve. From the Produt drop-down list, selet DLP Prevent Server. Selet the My Defult poliy for Emil Settings. Enter the IP ddress of the Smrt Host, then lik Sve. 7 Set up the ppline Prepre the ppline for network integrtion. 3

4 By defult, eh ppline is onfigured with these IP ddresses fter instlltion: LAN /24 Use the LAN1 network for SMTP or ICAP trffi. You n lso use it for mngement trffi. OOB /24 (Optionl) Use the out-of-nd (OOB) network for mngement trffi inluding MAfee epo ommunition. If your network uses DHCP, the first IP ddress tht the DHCP server ssigns to the ppline is used insted. You n mnully onfigure the IP ddress with the Setup Wizrd. The ppline does not support using ontinuous DHCP onfigurtion. The defult gtewy for the ppline uses the LAN1 network. Configure ny routing required on the OOB interfe using stti routes. Instll the ppline in rk. d Connet monitor, keyord, nd mouse to the ppline. Connet the LAN1 interfe of the ppline to your network. (Optionl) Connet the OOB interfe to nother network. 8 Instll the ppline Instll the softwre nd run the Setup Wizrd. Prepre the ppline for instlltion pplines Turn on the ppline nd 5500 pplines 1 Using the instlltion ISO file, rete or set up the externl imging medi. You n perform the initil instlltion using these methods: USB drive USB CD drive Use imge writing softwre, suh s Lunhpd Imge Writer, to write the imge to the USB drive. For more informtion, see KB (4400 pplines only) Integrted CD drive Virtul CD drive using the remote mngement module (RMM) 2 Insert or onnet the medi to the ppline. 3 Turn on the ppline. 4 Before the operting system strts, press F6 for the oot menu nd selet the externl medi. R30n3x is the BIOS pssword for 4400 pplines. 4

5 Follow the onsreen prompts. When the instlltion ompletes, the ppline restrts. Complete the Setup Wizrd using the informtion in the on-sreen help. MAfee DLP Prevent is instlled nd registered to MAfee epo. If the instlltion fils, ll MAfee tehnil support. Do not perform the instlltion gin. 9 Perform post-setup tsks Configure n evidene server to store the files tht triggered rule violtions. Configure one or more syslog servers if required. Verify onnetivity nd mil flow etween the mil trnsfer gent (MTA) server nd MAfee DLP Prevent. Verify tht the X-RCIS-Ation: Allow heder is dded to reeived emil. Verify onnetivity etween the we proxy server nd MAfee DLP Prevent. Crete lssifitions nd rules to detet potentil violtions within your network. For more informtion on these tsks, refer to the produt guide. 5

6 6

7 7

8 2016 Intel Corportion Intel nd the Intel logo re trdemrks/registered trdemrks of Intel Corportion. MAfee nd the MAfee logo re trdemrks/ registered trdemrks of MAfee, In. Other nmes nd rnds my e limed s the property of others. 8 0B00