About The Firewall Policy Tab - McAfee HISCDE-AB-IA - Host Intrusion Prevention Product Manual

Working with Host Intrusion Prevention Clients
Overview of the Windows client
Creating and editing IPS Policy exception rules
View, create, and edit IPS exception rules on the IPS Policy tab on the client.
Task
1 In the IPS Policy tab, click Add to add a rule.
2 In the Exception Rule dialog box, type a description for the rule.
3 Select the application the rule applies to from the application list, or click Browse to locate
the application.
4 Select Exception rule is Active to make the rule active. Exception applies to all
signatures, which is not enabled and selected by default, applies the exception to all
signatures.
5 Click OK.
6 For other edits, do one of the following:
To...
View the details of a rule or edit a rule
Make a rule active/inactive
Delete a rule
Apply changes immediately

About the Firewall Policy tab

Use the Firewall Policy tab to configure the Firewall feature, which allows or blocks network
communication based on rules that you define. From this tab you can enable or disable
functionality and configure client firewall rules. For details on firewall policies, see Configuring
Firewall Policies .
The firewall rules list displays rules and rule groups relevant to the client and provides summary
and detailed information for each rule. Rules in italics cannot be edited.
Table 17: Firewall Policy tab
Item
Checkbox
Firewall group
Timed group
Location-aware group
McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5
Do this...
Double-click a rule, or select a rule and click
Properties. The Exception Rule dialog box appears
displaying rule information that can be edited.
Select or clear the Exception rule is Active checkbox in
the Exception Rule dialog box. You can also select or
clear the checkbox next to the rule icon in the list.
Select a rule and click Remove.
Click Apply. If you do not click this button after making
changes, a dialog box appears asking you to save the
changes.
Description
Indicates whether the rule is enabled (checked) or disabled
(unchecked). For rules not in italics, you can enable and
disable the rule with the checkbox.
Displays the list of rules it contains. Click the plus box to
display the rules; click the minus box to hide the rules.
Indicates the group is a timed group.
Indicates the group is a location-aware group.
89