Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
688 Views 1 Reply Latest reply: Apr 23, 2013 10:48 AM by Kary Tankink RSS
cpcit Newcomer 31 posts since
Jan 12, 2013
Currently Being Moderated

Apr 23, 2013 12:22 AM

HIPS target exceptions

Hi, we recently rolled out hips 8.0 to a few select users and set it to monitor threats. We have to create exceptions for a few target exe's like logmein.exe. I noticed that when exceptions are created both target path and target file name has to be mentioned but the target path will usually be the user profile path. Is there a way to create exceptions only for the target exe rather than using the target path aswell.

 

Thanks.

  • Kary Tankink McAfee Employee 654 posts since
    Mar 3, 2010
    Currently Being Moderated
    1. Apr 23, 2013 10:48 AM (in response to cpcit)
    Re: HIPS target exceptions

    You can change any details in the IPS exception, as needed.  If you don't want the path, you can use a wildcard, or just remove it.

     

    Example:

    C:\Users\username1\Desktop\notepad.exe

     

    Can be changed to:

    C:\Users\*\Desktop\notepad.exe

    or

    C:\Users\**\notepad.exe

    or

    **\notepad.exe

     

     

    Be aware of how IPS exception criteria is AND/OR'd together though.

     

    KB70652 - Host Intrusion Prevention 7.0 IPS exception criteria (applied to HIPS 8.0 too)

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points