cancel
Showing results for 
Search instead for 
Did you mean: 
Dvanmeter
Level 9

HIPS general question about application enveloping and shielding

It seems that te biggest headache we have seen with false positive blocks on our servers and workstations is with the enveloping and shielding feature.  Is it common for admins not to block these medium signatures on servers or to change the signatures to be "low" if blocking on High and mediums? or is this one of those things that nobody would recommond? 

Message was edited by: Dvanmeter on 4/17/12 4:20:42 PM CDT
0 Kudos