McAfee HISCDE-AB-IA - Host Intrusion Prevention Manuals

Manuals and User Guides for McAfee HISCDE-AB-IA - Host Intrusion Prevention. We have 1 McAfee HISCDE-AB-IA - Host Intrusion Prevention manual available for free PDF download: Product Manual

McAfee HISCDE-AB-IA - Host Intrusion Prevention Product Manual

McAfee HISCDE-AB-IA - Host Intrusion Prevention Product Manual (154 pages)

Product Guide for use with ePolicy Orchestrator 4.5

Brand: McAfee | Category: Software | Size: 1 MB

Table of Contents

Table of Contents
3
Introducing Host Intrusion Prevention

7
Managing Your Protection

12
- Information Management
  12
  - Host IPS Dashboards
    12
  - Host IPS Queries
    13
- Policy Management
  16
  - Where to Find Policies
    16
  - Configuring Polices
    17
  - Default Protection and Tuning
    18
  - Host IPS Policy Migration
    22
- System Management
  23
  - Host IPS Permission Sets
    23
  - Assigning Permission Sets
    24
  - Host IPS Server Tasks
    25
  - Host IPS Event Responses
    26
  - Host IPS Protection Updates
    27
  - Checking in Packages Manually
    28
Configuring IPS Policies

29
- Overview of IPS Policies
  29
  - Methods for Delivery of IPS Protection
    30
  - Signatures
    31
  - Behavioral Rules
    32
  - Reactions
    32
  - Exceptions
    32
  - Application Protection Rules
    33
  - Events
    33
- Enable IPS Protection
  33
- Configuring the IPS Options Policy
  34
- Set the Reaction for IPS Signatures
  35
  - Configuring the IPS Protection Policy
    36
- Define IPS Protection
  36
- Monitor IPS Events
  47
- Monitor IPS Client Rules
  50
  - Managing IPS Client Rules
    50
Configuring Firewall Policies

52
Configuring General Policies

73
- Overview of General Policies
  73
- Define Client Functionality
  74
Working with Host Intrusion Prevention Clients

81
Appendix A - Writing Custom Signatures and Exceptions

101
- Rule Structure
  101
  - Common Sections
    102
  - Optional Common Sections
    104
  - Wildcards and Variables
    104
  - Windows Custom Signatures
    107
  - Windows Class Buffer Overflow
    107
  - Windows Class Files
    108
  - Windows Class Hook
    111
  - Windows Class Illegal Host IPS API Use
    112
  - Windows Class Illegal Use
    113
  - Windows Class Isapi (HTTP)
    113
  - Windows Class Program
    116
  - Windows Class Registry
    117
  - Windows Class Services
    120
  - Windows Class SQL
    122
  - Classes and Directives Per Windows Platform
    123
- Non-Windows Custom Signatures
  127
  - Solaris/Linux Class Unix_File
    127
  - Solaris/Linux Class Unix_Apache (HTTP)
    130
  - Solaris/Linux Class Unix_Misc
    131
  - Solaris Class Unix_Bo
    132
  - Solaris Class Unix_Map
    133
  - Solaris Class UNIX_GUID
    133
  - Classes and Directives Per UNIX Platform
    134
Appendix B - Troubleshooting

136
- General Issues
  136
- Host IPS Logs
  141
- Clientcontrol.exe Utility
  144

Advertisement

Advertisement

Related Products

McAfee Categories

Software Firewall Accessories Network Hardware Server

More McAfee Manuals