Installed Hips 8 with Agent 4.6 on various window systems (2003, Win7 , 2008 etc...)
Enabled IPS signatures 6010 and 6011
Created appropriate exception rules within the IPS policy
On most systems HIPS 8 with blocking and excpetions rules work as expected.
On some systems it does not work
Veriied HIPS 8 installed and active
Verified polices are applied
Reinstalled agent/hips reapplied policies on systems with issues still no change
Need to determine why HIPS 8 does not work on some systems.
If these are the application blocking signatures, make sure your exception paths are correct. You could have an exception as follows:
Process path C:\program files\whatever.exe
This could be correct for some products but maybe you have another system where your exception may not apply:
Process path C:\program files (x86)\whatever.exe
In this case you would need to wildcard out the C:\program files*\whatever.exe fileMessage was edited by: greatscott on 8/14/12 7:05:49 AM CDT