ENS OAS actions

[shwetank]

Of all action items listed below what are the instances when McAfee takes no action. vendor_action deny write would deny write none IDS_ACTION_WOULD_BLOCK deny terminate Clean Deny would deny execute would deny read blocked IDS_ALERT_ACT_TAK_DEN deny execute MSME85PHA hip.reaction.permit IDS_ALERT_ACT_TAK_CLE IDS_ALERT_ACT_TAK_DEL allowed deny read deny create Logged Replaced deleted hip.reaction.block None deny delete would deny create IDS_ALERT_ACT_TAK_WBD Cleaned access denied would deny delete

[tzemva · Accepted solution]

Hi @shwetank

IDS_ACTION_WOULD_BLOCK = Reporting only, Read/Write/Execute actions are ALLOWED
IDS_ALERT_ACT_TAK_WBD = "Delete pending"
IDS_ALERT_ACT_TAK_DEN = “Deny Access”
IDS_ALERT_ACT_TAK_DEL = "Deleted"
IDS_ALERT_ACT_TAK_CLE = "Cleaned"

So if I understood your question correctly, only "IDS_ACTION_WOULD_BLOCK" performs NO action; Other actions are either BLOCK, CLEAN, DELETE