We are receiving a POP about every 5 minutes, which reads "McAfee Intrusion Detection Alert", intrusion type - "Network DoS Protection Settings modified"..an etry is also registered in the HIPS log.
this is particularly annoying when logged in to receive this every 5 minutes, and the logs are full of this.
any idea what is causing this? it's not causing any performance impact, but can't seem to understand what is causing this.
You probably have the "Display popup alert" option set in the HIPS Client UI policy. Because Signature 933 "Network DoS Protection Settings modified" is triggering, this is causing the popup alert. In the IPS rules policy, look up the description of what this signature does.
Thanks a million for your response. We will check this out and let you know if this resolves the issue...can't thank you enouugh!