Configuring Acl Rules In The Ips Sensor - McAfee M-1250 - Network Security Platform Configuration Manual

McAfee® Network Security Platform 5.1
The Source and Destination OS columns in the Alerts page displays OS information for
TCP traffic. These columns display "Not Available" in the following cases:
•
•
•
OS information when McAfee NAC is enabled, is displayed in the Host page of the Threat
Analyzer.
This information is displayed in the
and guest clients. For other hosts, the OS information is displayed as
more information on managed hosts and guest clients, see
You can right-click in the Host page and select
Figure 188: OS Information For Managed Hosts

Configuring ACL rules in the IPS Sensor

The
IP spoofing detection. The available ACL tab actions are:
•
•
•
When OS finger printing is not enabled under IPS settings node
For non-TCP traffic
In instances where the stack has been modified
ACL
tab provides actions for configuring access control list (ACL) rules and enabling of
Assigning Access Control List (ACL) rules (on page 181): Assign ACL rules and
groups to Sensor/port or interfaces.
Editing ACL Log settings (on page 186): Manage ACL logging, a tool to help see
which packets are permitted/dropped based on your ACL rules.
Enabling IP Address spoofing detection (on page 188): Enable detection of IP
spoofing attacks.
OS
column, and is available only for managed hosts
Show Column
180
The IPS Sensor_Name node
Not Available
. For
NAC Configuration Guide
.
OS
to display the column.