McAfee® Host Intrusion Prevention 6.1 Product Guide | IPS Policies |
| IPS Events |
4After you return to the original dialog box, click OK. Any events that match the selected criteria are changed to the selected state.
If you do not select specific criteria, all events are affected when you click OK.
4
Viewing event details
The IPS Event Properties dialog box displays information about a selected event. Viewing this data can be useful to
To view event details:
The IPS Event Properties dialog box appears with four tabs: General, Description, Advanced Details, and Summary. Click the Help in the dialog box for details.
Figure 4-18 IPS Event dialog box—General tab
Creating event-based exceptions and trusted applications
Under certain circumstances, behavior that is interpreted as an attack can be a normal part of a user’s work routine. When this occurs, you can create an exception rule or create a trusted application rule for that behavior.
61