Moved to HIPS area
McAfee HIP is a different product in comparison to VSE. The best way to do this get the policy created in observe mode ( FW +IPS )
Thanks for the reply. I thought that would at least be the easiest way at least, and am not sure what that is not being done.
Thanks again ajayupadhyay1