
• Prevent high and medium severity level signatures and ignore the rest.
Maximum Protection
• Prevent high, medium, and low severity level signatures and log the rest.
Prepare for Enhanced Protection
• Prevent high and log medium severity level signatures and ignore the rest.
Prepare for Maximum Protection
• Prevent high and medium severity level signatures, log low severity level signatures, and
ignore the rest.
Warning
• Log high severity level signatures and ignore the rest.
On the Policy Catalog policy list page, click New Policy to create a new custom policy; click
Duplicate under Actions to create a new custom policy based on an existing policy.
Change the policy’s assignment on the Policy Assignment page. For a group, go to Systems
| System Tree, select a group, and then on the Policies tab click Edit Assignment. For a
system go to Systems | System Tree, select a group that contains the system, and then on
the System tab, select the system and select More Actions | Modify Policies on a Single
System.
Tasks
Configuring the IPS Protection policy
Configuring the IPS Protection policy
Use this task to set the protective reaction for signature severity levels. These settings instruct
clients what to do when an attack or suspicious behavior is detected.
Task
For option definitions, click ? on the page displaying the options.
1 Go to Systems | Policy Catalog and select Host Intrusion Prevention: IPS in the
Product list and IPS Protection in the Category list. The list of policies appears.
2 In the IPS Protection policy list, click Edit under Actions to change the settings for a
custom policy.
Figure 3: IPS Protection
3 In the IPS Protection page that appears, make any needed changes, then click Save.
Configuring IPS Policies
Working with IPS Protection policies
29McAfee Host Intrusion Prevention 7.0 Product Guide for use with ePolicy Orchestrator 4.0
Comentarios a estos manuales