cancel
Showing results for 
Search instead for 
Did you mean: 
fawkes
Level 7
Report Inappropriate Content
Message 1 of 1

How to create exceptions based on logged IPS event level.

Is there a Howto / Best Practices guide for creating HIPS IPS exceptions policies?

If you set the HIPS IPS policy from block High / Log Medium events and let that sit a few days, how do you go about creating the exceptions policy based on the Medum events which are now logged?

That way once you have added those medium events you can apply block High / Medium without too much impact.