McAfee HISCDE-AB-IA Product Guide - Page 153

Index Policy Catalog (continued) Trusted Applications 78 Trusted Networks 77 policy enforcement Host IPS 9 Host IPS clients and ePO 7 Linux client and 97 Solaris client and 94 policy management accessing Host IPS policies 16 analyzing Host IPS events and client rules 16 Linux client and 97 Policies tab, Host IPS 16 tracking Host IPS policies 10 tuning Host IPS 10, 18 ports blocked traffic and firewall rules 63 connections and firewall alerts 87 firewall and state table entries 60 FTP connections and stateful packet inspection 61 precedence firewall rules list 53 General policies, Host IPS and 73 Network IPS and IP addresses 78 Trusted Networks policy 78 preconfigured policies Client UI 74 Firewall Rules 67 IPS Options 33 IPS Protection 35 Trusted Applications 78 Trusted Networks 77 protocols tracking, and stateful firewall 62 Q queries, Host IPS custom, parameters for 13 managing information 12 predefined and custom 13 reports 10 tracking activities 13 R reactions about 32 firewall alerts, responding to 87 intrusion alerts, responding to 86 IPS Protection, configuring 35 mapping to IPS severity 10 setting, for signature severity levels 36 spoof detected alerts, responding to 87 types of 32 rule groups, Host IPS firewall rule groups, creating 69 rule structure custom signatures 101 rules lists exceptions for Host IPS 88 firewall rules for Host IPS 90 S server tasks, Host IPS checking in updates 27 server tasks, Host IPS (continued) Export Policies 25 Export Queries 25 managing deployment 23, 25 Property Translator 25 Purge Event Log 25 Purge Threat Event Log 25 Repository Pull 25 Run Query 25 severity levels, IPS events and 47 IPS Protection policy 35 mapping to a reaction 10 setting and tuning protection 18 setting reactions for 36 tuning 10, 17 working with signatures 39 shielding and enveloping IPS behavioral rules and 32 signature security levels types of 39 signatures alerts and NIPS signatures 86 configuring IPS Rules policy 40 creating custom host IPS 41 creating with expert method 41 creating with standard method 41 custom 39 default host IPS 39 defined 31 exception rules list 88 exceptions 32 HIPS, about 31 host 39 host IP, and exceptions 86 IPS Rules policy 36 network 39 NIPS, about 31 severity levels 39 severity levels for 35 tuning Host IPS policies 10 types of 39 using the wizard to create 42 working with 39 Solaris client installation files 96 overview 94 policy enforcement 94 preventing buffer overflow 94 stopping and restarting 96 troubleshooting 95 verifying client is running 96 Spoof Detected alerts 87 state table, firewall functionality 60 overview 60 stateful firewall how stateful filtering works 60 packet inspection, how it works 61 protocol tracking 62 system call interception 30 system management automatic responses for Host IPS events 26 server tasks for Host IPS 23, 25 updating Host IPS protection 27 McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5 153