McAfee Host Intrusion Prevention Server v7.0.1

McAfee Host Intrusion Prevention Server v7.0.1

  • نسخه :Version 7.0.1
  • نوع فایل : نرم افزار
  • زبان : انگلیسی
  • سیستم عامل : Windows 32Bit & 64Bit
  • تولید کننده : McAfee
  • سال تولید : 2015

Description

Host IPS client rules that are created after the policy for the Host IPS module (IPS, Firewall, or Application Blocking) is set to Learn or Adaptive mode are not reported to the ePO console if Retrieve all system and product properties (recommended) is deselected in the McAfee Agent policy.
Solution
Configure the McAfee Agent policy to collect full properties in ePO:
Log on to the ePO console.
Click Menu, Policy, Policy Catalog.
Select McAfee Agent from the Product drop-down list.
Select General from the Category drop-down list.
Click the policy that is currently assigned in your environment.
Select the following option for the entry named Agent-to-server communication:

Retrieve all system and product properties (recommended). If unchecked retrieve only a subset of properties.

Click Save.
Perform an agent wake-up call to apply the policy to the client systems.
Wait 15 minutes for the Host IPS Property Translator task to run, or you can manually run the ePO server task named Host IPS Property Translator.

NOTE: This Host IPS Property Translator server task should not be set to Enabled (leave it in the Disabled state). It is listed only to be run as an on-demand (when you do not want to wait 15 minutes) job because this task already runs inside the ePO database automatically every 15 minutes.
Future communication between the clients and the ePO server will provide full node product properties. The Host IPS Property Translator task will translate the node property rules and the client rules will display correctly in the appropriate Reporting, Host Intrusion Prevention, IPS/Firewall Client Rules section of the ePO console.

To verify that the Host IPS client rules are being sent to the ePO server properly:
Log on to the ePO console.
Click System Tree and click a system node in the ePO console to view the node properties.
Click More (on the far right) for the Host IPS product entry.
The Host IPS client rules are listed under the product section ClientPolicy as Client firewall rules or Local exception rule count.

NOTE: If no firewall client rules exist on the client, the Client firewall rules entry will not display in the node properties.

If you do not see the section ClientPolicy, the system is not yet reporting full properties to the ePO server. Verify the McAfee Agent policy is correctly configured per the solution above and that you have performed at least two agent wake-up calls with Retrieve all system and product properties (recommended) selected.
اگر شما نسبت به این اثر یا عنوان محق هستید، لطفا از طریق "بخش تماس با ما" با ما تماس بگیرید و برای اطلاعات بیشتر، صفحه قوانین و مقررات را مطالعه نمایید.

دیدگاه کاربران


لطفا در این قسمت فقط نظر شخصی در مورد این عنوان را وارد نمایید و در صورتیکه مشکلی با دانلود یا استفاده از این فایل دارید در صفحه کاربری تیکت ثبت کنید.

بارگزاری