Showing results for 
Search instead for 
Did you mean: 
Level 7

HIPS IPS Squelch Recurring Events

We have written a custom rule to record changes to autorun locations, however the rule does not send all events to ePO. The custom rule is logging changes in the local log correctly, but HIPS is squelching the events flowing to ePO.

In a HIPS IPS Custom Expert subrule, is there a way to send ALL triggered events to ePO and bypass the event squelching policies?

0 Kudos
1 Reply
McAfee Employee

Re: HIPS IPS Squelch Recurring Events

No, it is not possible to change this functionality.

0 Kudos