McAfee HISCDE-AB-IA Product Guide - Page 51

Create, Exception, then indicate the policy to which to move the exceptions.

Page 51 highlights

Configuring IPS Policies Monitor IPS client rules 3 Determine how you want to view the list of client exceptions: To... Sort by a column Filter for groups Filter for exception criteria Aggregate exceptions Do this... Click the column header. From the Filter menu select This Group Only or This Group and All Subgroups. Select time criteria; type process path, process name, user name, computer name, or signature ID in the search text box and press Return. Click Clear to remove filter settings. Click Aggregate, select the criteria on which to aggregate exceptions, then click OK. Click Clear to remove aggregation settings. 4 To move exceptions to a policy, select one or more exceptions in the list, click Create Exception, then indicate the policy to which to move the exceptions. McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5 51

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154

3
Determine how you want to view the list of client exceptions:
Do this...
To...
Click the column header.
Sort by a column
From the Filter menu select
This Group Only
or
This
Group and All Subgroups.
Filter for groups
Select time criteria; type process path, process name,
user name, computer name, or signature ID in the
Filter for exception criteria
search text box and press Return. Click
Clear
to remove
filter settings.
Click
Aggregate
, select the criteria on which to
aggregate exceptions, then click
OK
. Click
Clear
to
remove aggregation settings.
Aggregate exceptions
4
To move exceptions to a policy, select one or more exceptions in the list, click
Create
Exception
, then indicate the policy to which to move the exceptions.
Configuring IPS Policies
Monitor IPS client rules
51
McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5