McAfee HISCDE-AB-IA Product Guide - Page 149

Index

Page 149 highlights

Index A activity logs, Host IPS customizing options 93 deleting entries 93 firewall logging options 85 IPS logging options 85 viewing 93 working with Activity Log tab 93 adaptive mode applying 21 FAQ 21 rules not created automatically 21 with IPS vs firewall 21 about 10 automatic tuning 18 exception and 32 Firewall Options policies 64 Firewall Rules policies 67 IPS Options policy 34 placing Host IPS clients in 20, 33 advanced properties, Host IPS automatic responses 26 alerts, Host IPS firewall 87 intrusion alerts 86 learn mode and unknown network traffic 63 responding to 86, 87 setting options for clients 83 spoof detected 87 Windows clients 86 allow and block actions network communications, Firewall Policy 89 stateful firewall filtering 60 application protection rules about 33 configuring 45 creating 45 IPS Rules policy 33, 36, 45 overview 43 processes, allowed or blocked 43 working with 43 automatic responses, Host IPS about 26 configuring 17 rules and events 26 B basic protection default Host IPS policies 18 Host IPS 7 behavioral rules defining legitimate Host IPS activity 32 shielding and enveloping 32 Blocked Hosts tab, working with 91 buffer overflow configuring Trusted Applications policy 78 IPS behavioral rules and 32 preventing on Solaris client 94 C client rules Firewall 64, 71 creating, with adaptive and learn modes 10 creatng exceptions 32 Firewall 64, 71 Host IPS queries 13 IPS 36 IPS Rules policy, overview 50 Client UI policy about 8 configuring 74 define 74 General tab, configuring 75 options 83 overview 73 passwords 75 tray icon control, configuring 75 troubleshooting 76 ClientControl utility command-line syntax 144 function and setup 144 stopping services 144 using to troubleshoot 144 clients analyzing data on Host IPS clients 19 Linux (See Linux client) 97 naming conventions for Host IPS 19 queries for groups of 13 Solaris (See Solaris client) 94 tuning Host IPS 19 updating with task or agent wake-up call 28 Windows (See Windows client) 81 working with, in Host IPS 19 command-line options ClientControl.exe, upgrade automation 84 Solaris client, restarting 96 stopping and restarting Linux client 99 stopping the Solaris client 96 verifying Linux client is running 99 verifying Solaris client is running 96 compliance configuring Host IPS dashboards to view 17 custom signatures common sections 102 directives vaild on Windows 123 directives valid on Linux 134 directives valid on Solaris 134 Linux 127 Linux, UNIX_apache (HTTP) 130 McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5 149

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154

Index
A
activity logs, Host IPS
customizing options
93
deleting entries
93
firewall logging options
85
IPS logging options
85
viewing
93
working with Activity Log tab
93
adaptive mode
applying
21
FAQ
21
rules not created automatically
21
with IPS vs firewall
21
about
10
automatic tuning
18
exception and
32
Firewall Options policies
64
Firewall Rules policies
67
IPS Options policy
34
placing Host IPS clients in
20
,
33
advanced properties, Host IPS
automatic responses
26
alerts, Host IPS
firewall
87
intrusion alerts
86
learn mode and unknown network traffic
63
responding to
86
,
87
setting options for clients
83
spoof detected
87
Windows clients
86
allow and block actions
network communications, Firewall Policy
89
stateful firewall filtering
60
application protection rules
about
33
configuring
45
creating
45
IPS Rules policy
33
,
36
,
45
overview
43
processes, allowed or blocked
43
working with
43
automatic responses, Host IPS
about
26
configuring
17
rules and events
26
B
basic protection
default Host IPS policies
18
Host IPS
7
behavioral rules
defining legitimate Host IPS activity
32
shielding and enveloping
32
Blocked Hosts tab, working with
91
buffer overflow
configuring Trusted Applications policy
78
IPS behavioral rules and
32
preventing on Solaris client
94
C
client rules
Firewall
64
,
71
creating, with adaptive and learn modes
10
creatng exceptions
32
Firewall
64
,
71
Host IPS queries
13
IPS
36
IPS Rules policy, overview
50
Client UI policy
about
8
configuring
74
define
74
General tab, configuring
75
options
83
overview
73
passwords
75
tray icon control, configuring
75
troubleshooting
76
ClientControl utility
command-line syntax
144
function and setup
144
stopping services
144
using to troubleshoot
144
clients
analyzing data on Host IPS clients
19
Linux (See Linux client)
97
naming conventions for Host IPS
19
queries for groups of
13
Solaris (See Solaris client)
94
tuning Host IPS
19
updating with task or agent wake-up call
28
Windows (See Windows client)
81
working with, in Host IPS
19
command-line options
ClientControl.exe, upgrade automation
84
Solaris client, restarting
96
stopping and restarting Linux client
99
stopping the Solaris client
96
verifying Linux client is running
99
verifying Solaris client is running
96
compliance
configuring Host IPS dashboards to view
17
custom signatures
common sections
102
directives vaild on Windows
123
directives valid on Linux
134
directives valid on Solaris
134
Linux
127
Linux, UNIX_apache (HTTP)
130
149
McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5