Exploit Prevention on Linux

[Jmac24]

Probably one of the easiest questions you will get. Reading through the product guide and looking at the policies, exploit prevention rules appear to be intended for only Windows based systems.

I have an open item showing on our teams work list to enable exploit prevention for Linux based systems. Is it even applicable? I did a search in the product documentation for ENSL for "exploit" and there are 0 results, so I'm guessing no, but wanted to clarify before passing that along and closing that item out.

Thanks

[jfurukaw]

Hello @Jmac24 Jmac24 ,

As you know, the exploit prevention feature is only on Windows based systems. There is no exploit prevention feature that can be enabled on Linux based systems.

We cannot provide feedback on the availability or timing of implementation, but you can submit it as a product enhancement request as below if you want.

[URL]How to submit a new Product Idea (Product Enhancement Request)
https://kc.mcafee.com/corporate/index?page=content&id=KB60021&actp=null&viewlocale=en_US&locale=en_U...

[gururaj]

Hi,

we didn't have exploit prevention in Endpoint security for Linux. as mentioned by  JfuruKaw you raise 

How to submit a new Product Idea (Product Enhancement Request)
https://kc.mcafee.com/corporate/index?page=content&id=KB60021

Regards,

Gururaj.m.d

[Jmac24]

Since there is no Exploit Prevention equivalent for Linux, what would be recommended as and HIPS solution for Linux systems?

[gururaj]

Hi,

you can use the Endpoint Security for Linux Firewall.
https://kc.mcafee.com/corporate/index?page=content&id=KB91326

Regards,

Gururaj.m.d