McAfee HISCDE-AB-IA - Host Intrusion Prevention Product Manual page 151

Index
firewall, Host IPS (continued)
overview 52
permissions for 23
queries 13
rule groups 55
rule groups, location-aware
rules, allow and block 53
state table 60
stateful filtering, how it works
stateful packet filtering 59
stateful packet inspection 59,
stateful protocol tracking 62
G
General policies, Host IPS
feature overview 73
permissions for 23
Trusted Applications policy page
global administrators
assigning permission sets 23
groups, Host IPS
and inheritance 9
assigning policies to 9
configuration criteria 10
deleting policies and inheritance for
firewall location-aware, creating
how policies are applied 9
H
host intrusion prevention signatures
Host IPS
activities and dashboards 12
basic and advanced protection
features and categories 9
how it works 7
how to set and tune protection
Intrusion Information tab 86
permission sets 23
policies and their categories
responding to alerts 86
types of policies 8
Host IPS Catalog
adding to 70
contents 58
dependencies 58
editing 70
explanation 58
exporting from 70
exporting to 70
filtering 70
using 70
Host IPS Property Translator task
I
information management
analyzing Host IPS client data
dashboards and queries for Host IPS
predefined and custom queries for Host IPS
intrusion prevention (IPS)
adaptive mode and exceptions
behavioral rules 32
client rules 13
client rules, overview 50
customizing options 88
McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5
55
60
61
79
16
70
31
7
18
9
25
19
12
13
32
intrusion prevention (IPS) (continued)
delivery methods 30
editing exception rules 89
engines and drivers 30
enveloping and shielding 30
exceptions 32
Firewall logging options 85
HIPS, about 31
IPS Protection policy 35
logging options 85
NIPS, about 31
overview 29
reactions 32
signatures, defined 31
system call interception 30
IP address
configuring trusted networks
firewall rules and 89
location-aware groups 55
monitoring blocked hosts 91
rule groups 55
stateful firewall, IPv4 vs. IPv6
IPS events
about 33
exceptions, creating 47
managing 48
overview 47
trusted applications, creating
working with 47
IPS Options policy
about 8
adaptive mode 33
configuring 34
overview 29
preset policies 34
working with 33
IPS protection
disable 33
enable 33
IPS Protection policy
about 8
configuring 36
overview 29
reactions, setting 36
severity levels, setting 35
working with 35
IPS Rules policy
wildcards 42
about 8
application protection rules 33, 43,
application protection rules, configuring
configuring 37, 45
define 36
events, working with 47
exception rules 46
exceptions, configuring 37
logging events 33
managing exceptions 46
overview 29
signatures, configuring 37
signatures, working with 39
IPS, Host IPS
permissions for 23
78
60
47
45
37
151