cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 7
Report Inappropriate Content
Message 1 of 4

Migrating HIPS Expert Rules to ENS

Jump to solution

I am attempting to migrate our VSE/HIPS policies to ENS using the Endpoint Migration Assistant. We have several custom HIPS rules. The ones that were created using "Standard Subrules" have migrated to the ENS Access Protection policy with no issue.  But anything that was using an "Expert Subrule" does not appear to get migrated anywhere.  Is this normal?

If there's is no way to migrate these automatically, is there a tool or anything that can assist with converting the syntax of these rules into a AAC-based Expert rule to be used in the Exploit Prevention policy?

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Migrating HIPS Expert Rules to ENS

Jump to solution

Hi @curo 

The IPS Expert Rules created as a sub-rule migrate to the ENSTP EP policy as described in the the guide:

https://docs.mcafee.com/bundle/endpoint-security-migration-guide-epolicy-orchestrator-windows/page/G...

As you can see, there are some that will not migrate and need to be re-created.

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

View solution in original post

3 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Migrating HIPS Expert Rules to ENS

Jump to solution

Hi @curo 

The IPS Expert Rules created as a sub-rule migrate to the ENSTP EP policy as described in the the guide:

https://docs.mcafee.com/bundle/endpoint-security-migration-guide-epolicy-orchestrator-windows/page/G...

As you can see, there are some that will not migrate and need to be re-created.

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

View solution in original post

Highlighted
Level 7
Report Inappropriate Content
Message 3 of 4

Re: Migrating HIPS Expert Rules to ENS

Jump to solution

Thanks for the link.  Our rules are mainly file-based so yeah it looks like I will need to recreate them.

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Migrating HIPS Expert Rules to ENS

Jump to solution

Ah, sorry to hear! Hopefully you can use it as an opportunity to review the rules and see if you still need all of them? (trying to put a positive spin on it 🙂 )

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community