McAfee HISCDE-AB-IA Product Guide - Page 151

Host IPS Property Translator task, General policies, Host IPS

Page 151 highlights

Index firewall, Host IPS (continued) overview 52 permissions for 23 queries 13 rule groups 55 rule groups, location-aware 55 rules, allow and block 53 state table 60 stateful filtering, how it works 60 stateful packet filtering 59 stateful packet inspection 59, 61 stateful protocol tracking 62 G General policies, Host IPS feature overview 73 permissions for 23 Trusted Applications policy page 79 global administrators assigning permission sets 23 groups, Host IPS and inheritance 9 assigning policies to 9 configuration criteria 10 deleting policies and inheritance for 16 firewall location-aware, creating 70 how policies are applied 9 H host intrusion prevention signatures 31 Host IPS activities and dashboards 12 basic and advanced protection 7 features and categories 9 how it works 7 how to set and tune protection 18 Intrusion Information tab 86 permission sets 23 policies and their categories 9 responding to alerts 86 types of policies 8 Host IPS Catalog adding to 70 contents 58 dependencies 58 editing 70 explanation 58 exporting from 70 exporting to 70 filtering 70 using 70 Host IPS Property Translator task 25 I information management analyzing Host IPS client data 19 dashboards and queries for Host IPS 12 predefined and custom queries for Host IPS 13 intrusion prevention (IPS) adaptive mode and exceptions 32 behavioral rules 32 client rules 13 client rules, overview 50 customizing options 88 intrusion prevention (IPS) (continued) delivery methods 30 editing exception rules 89 engines and drivers 30 enveloping and shielding 30 exceptions 32 Firewall logging options 85 HIPS, about 31 IPS Protection policy 35 logging options 85 NIPS, about 31 overview 29 reactions 32 signatures, defined 31 system call interception 30 IP address configuring trusted networks 78 firewall rules and 89 location-aware groups 55 monitoring blocked hosts 91 rule groups 55 stateful firewall, IPv4 vs. IPv6 60 IPS events about 33 exceptions, creating 47 managing 48 overview 47 trusted applications, creating 47 working with 47 IPS Options policy about 8 adaptive mode 33 configuring 34 overview 29 preset policies 34 working with 33 IPS protection disable 33 enable 33 IPS Protection policy about 8 configuring 36 overview 29 reactions, setting 36 severity levels, setting 35 working with 35 IPS Rules policy wildcards 42 about 8 application protection rules 33, 43, 45 application protection rules, configuring 37 configuring 37, 45 define 36 events, working with 47 exception rules 46 exceptions, configuring 37 logging events 33 managing exceptions 46 overview 29 signatures, configuring 37 signatures, working with 39 IPS, Host IPS permissions for 23 McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5 151

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154

firewall, Host IPS
(continued)
overview
52
permissions for
23
queries
13
rule groups
55
rule groups, location-aware
55
rules, allow and block
53
state table
60
stateful filtering, how it works
60
stateful packet filtering
59
stateful packet inspection
59
,
61
stateful protocol tracking
62
G
General policies, Host IPS
feature overview
73
permissions for
23
Trusted Applications policy page
79
global administrators
assigning permission sets
23
groups, Host IPS
and inheritance
9
assigning policies to
9
configuration criteria
10
deleting policies and inheritance for
16
firewall location-aware, creating
70
how policies are applied
9
H
host intrusion prevention signatures
31
Host IPS
activities and dashboards
12
basic and advanced protection
7
features and categories
9
how it works
7
how to set and tune protection
18
Intrusion Information tab
86
permission sets
23
policies and their categories
9
responding to alerts
86
types of policies
8
Host IPS Catalog
adding to
70
contents
58
dependencies
58
editing
70
explanation
58
exporting from
70
exporting to
70
filtering
70
using
70
Host IPS Property Translator task
25
I
information management
analyzing Host IPS client data
19
dashboards and queries for Host IPS
12
predefined and custom queries for Host IPS
13
intrusion prevention (IPS)
adaptive mode and exceptions
32
behavioral rules
32
client rules
13
client rules, overview
50
customizing options
88
intrusion prevention (IPS)
(continued)
delivery methods
30
editing exception rules
89
engines and drivers
30
enveloping and shielding
30
exceptions
32
Firewall logging options
85
HIPS, about
31
IPS Protection policy
35
logging options
85
NIPS, about
31
overview
29
reactions
32
signatures, defined
31
system call interception
30
IP address
configuring trusted networks
78
firewall rules and
89
location-aware groups
55
monitoring blocked hosts
91
rule groups
55
stateful firewall, IPv4 vs. IPv6
60
IPS events
about
33
exceptions, creating
47
managing
48
overview
47
trusted applications, creating
47
working with
47
IPS Options policy
about
8
adaptive mode
33
configuring
34
overview
29
preset policies
34
working with
33
IPS protection
disable
33
enable
33
IPS Protection policy
about
8
configuring
36
overview
29
reactions, setting
36
severity levels, setting
35
working with
35
IPS Rules policy
wildcards
42
about
8
application protection rules
33
,
43
,
45
application protection rules, configuring
37
configuring
37
,
45
define
36
events, working with
47
exception rules
46
exceptions, configuring
37
logging events
33
managing exceptions
46
overview
29
signatures, configuring
37
signatures, working with
39
IPS, Host IPS
permissions for
23
Index
151
McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5