HIPS general question about application enveloping and shielding
It seems that te biggest headache we have seen with false positive blocks on our servers and workstations is with the enveloping and shielding feature. Is it common for admins not to block these medium signatures on servers or to change the signatures to be "low" if blocking on High and mediums? or is this one of those things that nobody would recommond?
Message was edited by: Dvanmeter on 4/17/12 4:20:42 PM CDT