This content has been marked as final. Show 5 replies
Just been trying to narrow it down and when I untick / disable ' Enable Host IPS' the system is much nippier.
umm.... any ideas ? Have I got it setup wrong ?
First off, do you have patch 1 installed or did you install the patch 1 repost?
It also depends on how you have the IPS module setup. Are you running with the default block high?
Thanks very much for the reply. Just to confirm I have installed Patch 1 and also the hotfix.
How do I know if the default is set to block high ??
Under the IPS Policy Tab, there is nothing in the exception box. Enable Host IPS is currently ticked. Also Enable Network IPS is ticked. Automatically block attackers also ticked.
In the ePO server console, the IPS protection policy will dictate how you are protected.
Basic protection only blocks on HIGH signatures. The only mode lower is Warning.
You might try setting your protection to warning and see if that makes a difference.
Thanks very much for the reply, I have jsut changed it. On epo version 4 the options are :
ignore / log / prevent.
I have changed it from preent to log, will monitor over the next few days.