This content has been marked as final. Show 2 replies
moved post to IDP/HIPS boards - MOD
I would recommend deploying HIPs in adaptive mode, and as you learn rules, I would add them to your policy. Then when all new rules learned are ones that you would block, just go to enforcing mode instead of adaptive mode.