2 Replies Latest reply on Mar 26, 2015 11:34 PM by djcabz

    HIPS 8.0 IPS exception for network share issues




      I am attempting to create IPS exceptions for 6010/6011 signatures for applications launched from network shares, however they don't seem to be working.  Utilizing other products than 6010/6011 signatures to provide whitelisting is not an option.


      The IPS Event in IPS Reporting is showing the Threat Source Process Name in the following format:  \\servername\sharename\subfolder\subfolder\exectuable.exe


      However, when I create an exception using this exact path and format for the Executable parameter, the exception is not working.


      Can anyone shed any light on how to properly create this exception?  Thank you very much.


      ePO 4.6.7