1 Reply Latest reply: Apr 23, 2013 10:48 AM by Kary Tankink RSS

    HIPS target exceptions

    cpcit

      Hi, we recently rolled out hips 8.0 to a few select users and set it to monitor threats. We have to create exceptions for a few target exe's like logmein.exe. I noticed that when exceptions are created both target path and target file name has to be mentioned but the target path will usually be the user profile path. Is there a way to create exceptions only for the target exe rather than using the target path aswell.

       

      Thanks.

        • 1. Re: HIPS target exceptions
          Kary Tankink

          You can change any details in the IPS exception, as needed.  If you don't want the path, you can use a wildcard, or just remove it.

           

          Example:

          C:\Users\username1\Desktop\notepad.exe

           

          Can be changed to:

          C:\Users\*\Desktop\notepad.exe

          or

          C:\Users\**\notepad.exe

          or

          **\notepad.exe

           

           

          Be aware of how IPS exception criteria is AND/OR'd together though.

           

          KB70652 - Host Intrusion Prevention 7.0 IPS exception criteria (applied to HIPS 8.0 too)