cancel
Showing results for 
Search instead for 
Did you mean: 
bcs1211
Level 7

Threat Event ID 18000

I have just configured my notifications for my new epo 4.5 server and I noticed I have been receiving many notifications for the above Threat Event ID.  The detecting product names is McAfee Host Intrusion Prevention and I either get HIPS detected and not handled or Virus detected and not handled. The threat names change all the time also.  Anyone have any insight as to this issue.  What this ID means?  Thank you.

Labels (1)
0 Kudos
1 Reply
bgable
Level 11

Re: Threat Event ID 18000

This is an IPS signature trigger event.

Refer to KB65559 for event ID types.

Refer to KB54473 to verify a HIP security event.

0 Kudos