cancel
Showing results for 
Search instead for 
Did you mean: 
MMWABI
Level 7

NDIS Intermediate Filter

Hi Guys,

hopefully you can help me. Last week we updated our ePO to ePO 4.0 and also updated the IPS to the version 7 patch3.

Now we have the Virusscan, Mcafee Agent & HIPS on our workstations running. Our Administrator found something interesting in the Network General Tab of the network card.

A function called "Mcafee NDIS Intermediate Filter".

I checked the Product Guide but no information about that. Can you tell me what the function exactly does? I want to inform our administrator, what this dooes and what will happen if we deactivat that feature?

Bye

MMWABI
0 Kudos
2 Replies
jawuk
Level 7

RE: NDIS Intermediate Filter

Is this not THEE component that does the filtering at the lowest level before the networking data reaches the OS level?

If you untick that. . . does the firewall carry on working?

I there is a product called Protowall that will filter packets before they reach you computer, (it drops packets from ranges you specify), and it has an NDIS driver you install. If you untick it. . . .it doesnt work.

J
0 Kudos
exesys
Level 7

NDIS Intermediate Filter

Yes, this is the network filter for the HIP 7.x firewall.

https://kc.mcafee.com/corporate/index?page=content&id=KB59945

https://kc.mcafee.com/corporate/index?page=content&id=KB51676

It is based on NDIS 5.0 spec.
http://www.microsoft.com/whdc/archive/ndis5.mspx

HIP 8.0, will be based on NDIS 6.0 spec.
http://msdn.microsoft.com/en-us/library/ms795192.aspx

The 8.0 beta should be starting sometime in Oct09.
0 Kudos