1 Reply Latest reply on Apr 9, 2014 10:45 AM by greatscott

    HIPS application blocking events of McAfee apps

    ta11

      HIPS 7

      I can see that HIPS blocks massively some Mcafee Products executable hooks. What does it mean? Should it be changed? Because I do not see any problems happening because of those blockings.

       

      Threat Source Process Name: MFEHIDIN.EXE

      Threat Source URL: file:///c:\PROGRAM FILES\MCAFEE\DLP\AGENT\VSCORE\X86\MFEHIDIN.EXE

      Event ID: 18002

      Threat Severity: Warning

      Threat Name: McAfee System Core Installer

      Threat Type: hook

      Action Taken Blocked

       

      The same event happens with

      FCAGS.EXE

      Threat Name: McAfee DLP Endpoint Service

      hook

      Blocked