cancel
Showing results for 
Search instead for 
Did you mean: 
cazulp
Level 7

Default HIPS Rules

We are testing McAfee HIPS stand alone (sans ePO) and need to change or delete one of the default rules that is blocking Incoming netbios-ssn (port 139) and ms-ds (port 445) needed for IP360 (ncircle). Can this be done or are we forced to use ePO console.

0 Kudos
2 Replies
McAfee Employee

Re: Default HIPS Rules

The Host IPS product must be managed by an ePO server, however, you can change the default rules before an ePO policy is applied.

KB50395 - How to deploy McAfee Host IPS with customized policies when an ePO server is not accessible

0 Kudos
cazulp
Level 7

Re: Default HIPS Rules

Thanks Kary - that was useful information that we will probably need in the future. Having read that KB, its obvious that I cannot do what I want (make a temporary change to the rules (default and learned) locally on my Workstation) without the ePO server.

0 Kudos