McAfee HISCDE-AB-IA - Host Intrusion Prevention Product Manual page 150

Index
custom signatures (continued)
Linux, UNIX_file (Files) 127
Linux, UNIX_misc 131
optional sections 104
overview for Linux and Solaris
overview for Windows 107
rule structure 101
section value variables 104
Solaris 127
Solaris, UNIX_apache (HTTP)
Solaris, UNIX_bo 132
Solaris, UNIX_file (Files) 127
Solaris, UNIX_GUID 133
Solaris, UNIX_map 133
Solaris, UNIX_misc 131
wildcards 104
Windows, Buffer Overflow 107
Windows, directives per platform
Windows, Files 108
Windows, Hook 111
Windows, Illegal 113
Windows, Illegal API Use 112
Windows, Isapi 113
Windows, Program 116
Windows, Registry 117
Windows, Services 120
Windows, SQL 122
D
dashboards
default Host IPS monitors 12
managing information in Host IPS
queries and Host Intrusion Prevention
viewing compliance and Host IPS issues
deployment
Host IPS policies and 10
initial Host IPS client rollout
server tasks for Host IPS 23
usage profiles in Host IPS 10
DNS blocking rules
creating and editing 70
E
effective policy
with multiple-instance policies
enveloping and shielding 30
events, Host IPS
automatic responses 26
analyzing and tuning 10
automatic responses 26
behavioral rules 32
exceptions 32
firewall, activity logs 93
intrusion alerts, responding to
IPS Rules policy 36
logging and IPS Events tab
managing 48
signature violations 33
working with 47
exception rules
about 32
aggregation and client rules
automatic tuning 20
configuring IPS Rules policy
Create Exception 86
150 McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5
127
130
123
12
10
17
19
38
86
33
50
46
exception rules (continued)
creating 47
creating, based on an event
defined 10
editing IPS policies 89
events and 47
IPS Rules policy 36, 46
list, Windows client and 88
working with 46
F
false positives
exceptions and IPS Rules policy
Trusted Applications policy, reducing
tuning Host IPS policies 10
FAQ
adaptive mode 21
multiple-instance policies 38
filters
Host IPS events and queries
how firewall stateful filtering works
querying Host IPS activities
Firewall DNS Blocking policy
about 8
define 67
overview 52
Firewall Options policy
TrustedSource 66
about 8
configuring 65
overview 52
working with 64
Firewall policies, Host IPS
feature overview 52
firewall protection
disable 64
enable 64
firewall rules
creating and editing 69
Firewall Rules policy
wildcards 72
about 8
client rules, managing 71
configuring 68
define 67
groups, creating 69
overview 52
firewall, Host IPS
stateful packet inspection 59,
about 8
actions, allow and block 60
alerts 87
client rules 13, 64
customizing options 90
DNS blocking rules 70
Firewall Options, configuring
firewall rule groups, creating
firewall rules 10, 67, 69
firewall rules list, ordering 53
Firewall Rules, configuring 68
how firewall rules work 53
learn and adaptive modes 63
list of rules 68, 89, 90
location-aware groups 70
logging options 85
47
46
78
10
60
13
61
65
69