0 Replies Latest reply on May 27, 2011 3:34 PM by fawkes

    How to create exceptions based on logged IPS event level.

      Is there a Howto / Best Practices guide for creating HIPS IPS exceptions policies?

       

      If you set the HIPS IPS policy from block High / Log Medium events and let that sit a few days, how do you go about creating the exceptions policy based on the Medum events which are now logged?

       

      That way once you have added those medium events you can apply block High / Medium without too much impact.