FYI in case you ever wanted to know all 49 options for a HIPS IPS exclusion Parameter Names are. You are now in luck.
Remember (from previous Post here) that unless the Parameter Name is that same, its an "AND" statement. ref: https://community.mcafee.com/t5/Host-Intrusion-Prevention-Host/HIPS-8-IPS-Exception-Rule-Cleanup/td-...
IE User Name and Host Name, not User Name or Host Name.
For OR, its (User Name=x or User Name=y or User Name=z) AND (Host Name=A or Host Name=B)
HIPS IPS Parameters Name Options |
API Name |
Authentication mode |
Client Agent |
Database servername |
Database username |
Destination file |
Detailed Event Info |
Display Name |
Drive type |
Files |
Group Name |
Local IP Address |
Local Port |
Method |
New Data |
Protocol |
Query |
Registry Key |
Registry Value(s) |
Remote IP Address |
Remote Port |
SQL line comment |
SQL original query |
SQL password |
SQL query |
Services |
Source |
Stored proc param char five length |
Stored proc param char four length |
Stored proc param char three length |
Stored proc param char two length |
Stored proc param five |
Stored proc param five length |
Stored proc param four |
Stored proc param four Length |
Stored proc param one |
Stored proc param one char length |
Stored proc param three |
Stored proc param three length |
Stored proc param two |
Stored proc param two length |
Stored procedure name |
Target Bytes |
Transport |
URL |
User Name |
Vulnerability Name |
Workstation Name |
Zone |