cancel
Showing results for 
Search instead for 
Did you mean: 
dgunner
Level 7

Windows updates and fire/app policy

I am in the process of developing my Intruder detection policies but have noticed that rules get created whenever windows updates are installed when learn mode is on.

What is the recommended practice to lock down the rules but still allow updates to be installed when users shut down their workstations? When my rules are finished learn mode will be off and so windows updates might fail to install....

I am using EPO4, HIPS 7 and VSE 7.5

Thanks happy
0 Kudos