Data Loss Prevention (DLP) Endpoint

Clean Install

McAfee defines a clean installation as a deployment where there are no elements of McAfee software pre-existing on the endpoint. See “Upgrades” if there is pre-existing software. Before deploying McAfee DLP Endpoint, review the supported environments documentation covering Windows and macOS platforms to ensure the environment is compatible.

• Supported platforms, environments, and operating systems for McAfee DLP Endpoint

Review the guides below for information about how to install McAfee DLP Endpoint and for additional details regarding system requirements.

• McAfee DLP Endpoint 11.1.x Installation Guide

A license key is required to use McAfee DLP Endpoint. The license key is available when you download the product from the McAfee download site. Your license key is found in the notes section when downloading the installation file. To find out where to activate the license key, review the following:

• License McAfee DLP

If you encounter an issue during installation, review this documentation:

• McAfee DLP Endpoint agent unexpectedly fails to install on a client system with client deployment task configured

If you need McAfee technical support, collect these logs prior to contacting McAfee:

• How to create an installation log for the Data Loss Prevention agent — By default, there is no log file created when deploying McAfee DLP Endpoint via McAfee ePO
• How to use Minimum Escalation Requirements tools with supported McAfee products

Upgrade

McAfee defines an upgrade as a deployment where a version of McAfee DLP already exists on the endpoint. If your environment has the End-of-Life version 9.3 installed, upgrade immediately to version 11.x.

• McAfee DLP Endpoint Upgrade Procedures Video
• End of Life for Data Loss Prevention Endpoint 9.3.x

Review the supported environments documentation to ensure that the environment is compatible before deployment:

• Supported platforms, environments, and operating systems for McAfee DLP Endpoint

Review guides for McAfee DLP Endpoint installation and system requirements:

• How to upgrade to a new software version

Part of the upgrade process may involve policy conversion and data migration:

• How to convert policies and migrate data

If you encounter an issue during installation, review this documentation:

• McAfee DLP Endpoint agent unexpectedly fails to install on a client system with client deployment task configured

If you need McAfee technical support, collect these logs prior to contacting McAfee:

• How to create an installation log for the Data Loss Prevention agent — By default, there is no log file created when deploying McAfee DLP Endpoint via McAfee ePO
• How to use Minimum Escalation Requirements tools with supported McAfee products

Rule Configuration

Rules are an integral part of McAfee DLP. Two commonly used rules are Device Control and Data Protection.

To configure Device Control rules, you must be licensed for Device Control:

• License McAfee DLP and Device Control

To create and configure DLP rules, review the following documentation:

• McAfee DLP Endpoint Videos — This playlist includes videos about Device Control rules, modifying rules, rule naming, and Data Protection rules
• McAfee Host DLP Best Practices: Protecting against data loss from external devices
• Configuration and use

Common Rule Use Cases

• Whitelisting removable storage
• Block and charge an iPhone with a plug-and-play device rule
• Prevent burning sensitive information to disk
• Block outbound messages with confidential content unless they are sent to a specific domain

To learn more about whitelisting and exceptions, view the following documentation:

• Whitelists and Exemptions — For data protection and device rules

McAfee DLP Endpoint and Google Chrome

The web protection feature in McAfee DLP Endpoint prevents sensitive information from being sent to cloud storage services. To learn more about Chrome supportability and DLP functionality with Chrome, review the following documentation. Note: McAfee DLP Endpoint behavior has changed from Chrome 68 and later.

• Video: Chrome 68 release impact on McAfee DLP Endpoint
• McAfee DLP and Google Chrome
• McAfee DLP Endpoint support for Google Chrome
• An intermittent one-time notification is displayed when third-party code (.dll) is injected into Google Chrome

If you encounter an issue during rule creation or unexpected outcomes from creating and deploying a rule to the endpoint, see the following documentation and collect the essential requirements (like the MER and Diagnostic Tool).

• How to use Minimum Escalation Requirements (MER) tools with supported McAfee products
• McAfee DLP Endpoint 11.1.x Diagnostic Tool

Performance & Hang/Crash Issues

McAfee DLP Endpoint integrates with many third-party products, which can lead to performance or hang/crash symptoms when the third-party product updates. Performance-related issues are different from hang/crash issues. For example, a performance-related issue is a slow endpoint that can still perform tasks.

• How to add a Trusted Application in McAfee DLP Endpoint to improve performance
• DLP 11.x.x Known Issues

An example of a hang or crash issue is a non-responsive application that no longer functions. An example of a crash issue is an application or endpoint that stops abruptly and requires a restart.

• DLP 11.x.x Known Issues

Capturing data during the performance problem or the hang or crash event is imperative to quickly addressing the issue. To address these issues, review this documentation:

• How to generate an agent diagnostic tool session and dump file when troubleshooting McAfee DLP Endpoint issues
• McAfee WebMER Client or MER tool intermittently stops responding when you run them on a client with Data Loss Prevention Endpoint installed