• No results found

6. Configuring Data Discovery

10.5. Exporting the Logs to a Spreadsheet File

The administrator can save the logs as a spreadsheet file in 'Microsoft Excel' file format for later analysis by exporting the logs. The spreadsheet file will contain the first 1000 entries in the log. If needed, the administrator can apply filters and search options to export the log pertaining to a specific time period or to export logs pertaining to specified filtering criteria. Refer to the

explanation under 'Filtering and Search Options' in the section 'The Logs tab' for more details.

Comodo MyDLP Administration Guide

11. The Endpoints Tab

Comodo MyDLP monitors and controls the data transfer to and from the endpoints and performs discovery scans on the endpoints based on the Data Transfer Policy rules and Endpoint Discovery rules in which they are specified as sources. In order for MyDLP server to monitor the traffic and scan the endpoints, the MyDLP Endpoint Agent needs to be installed in each of the endpoint. Once installed, the agent will poll the MyDLP server periodically and receive the commands from the MyDLP server and form a secure communication channel between the endpoint and the server.

The endpoint agent can be installed on the network computers in many different ways. For more details on installing the

endpoint agent, refer to the MyDLP Endpoint Agent Installation Guide available from http://www.mydlp.com/wp-

content/uploads/MyDLP-Endpoint-Installation-Guide.pdf.

Comodo MyDLP Administration Guide

Endpoints Table - Column Descriptions Column Description

Endpoint The Unique Identification (ID) number assigned to the endpoint by MyDLP, upon installation of the agent

and the first time when the agent polls the server, via a secure protocol. The ID remains unchanged even if the host name and/or the IP address of the endpoint is changed.

The unique ID number is used when specifying an endpoint while creating a user defined Endpoint

object.

IP Address The current IP address of the endpoint.

Computer Name The host name of the endpoint.

Logged on user The username of the currently logged-in user.

Installed Agent

Version The version number of the MyDLP Endpoint Agent installed on the endpoint.

Last Update Indicates the date and time at which the agent was last updated.

First Seen Indicates the date and time at which the agent first polled the MyDLP server.

The interface displays a snapshot summary of status of the endpoints and the agent versions. The administrator can search for specific endpoint(s) by entering their hostname, IP address, ID, and version of the installed agent either partially of fully in the text box at the top of the table and clicking 'Search'.

• Clicking 'Refresh' adds the newly added endpoints and removes the endpoints from which the agent is removed.

• Clicking 'Truncate' clears the full list and creates a new list of endpoints that are currently connected to the server.

12. The Revisions Tab

Comodo MyDLP saves the policies with the set of rules, every time a new policy is applied to the network. The 'Revisions' interface displays a list of MyDLP Policies that were applied whenever an administrator creates/edits rules in chronological order. The administrator can bookmark the policies by specifying a name shortly describing the change done. The administrator can also revert MyDLP to an earlier time point and apply the policy to the network with the set of rules that was in action at that time by restoring MyDLP to the selected Policy Revision.

Comodo MyDLP Administration Guide

The Right hand side of the interface displays the list of all the policy revisions automatically created by MyDLP, every time the policy is updated with new/edited rules and installed on the network. The left hand side pane displays the list of policies that are bookmarked by the administrator.

To bookmark a policy

• Select the policy revision and select the icon that appears in the Name column.

The 'Edit Revision Name' dialog will appear.

• Enter a name shortly describing the revision and click 'Save'.

Comodo MyDLP Administration Guide

To re-apply a policy from the revisions

• Select the policy revision

• Click the Restore icon that appears in the Controls column at the right end.

Comodo MyDLP Administration Guide

About Comodo

The Comodo companies are leading global providers of Security, Identity and Trust Assurance services on the Internet. Comodo CA offers a comprehensive array of PKI Digital Certificates and Management Services, Identity and Content Authentication (Two-Factor - Multi-Factor) software, and Network Vulnerability Scanning and PCI compliance solutions. In addition, with over 10,000,000 installations of its threat prevention products, Comodo Security Solutions maintains an extensive suite of endpoint security software and services for businesses and consumers.

Continual innovation, a core competence in PKI and a commitment to reversing the growth of Internet-crime distinguish the Comodo companies as vital players in the Internet's ongoing development. Comodo, with offices in the US, UK, China, India, Romania and the Ukraine, secures and authenticates the online transactions and communications for over 200,000 business customers and millions of consumers, providing the intelligent security, authentication and assurance services necessary for trust in on-line transactions.

Comodo Security Solutions, Inc.

1255 Broad Street Clifton, NJ 07013 United States

Tel : +1.877.712.1309

Email: [email protected]