1 Reply Latest reply on Mar 30, 2015 5:14 PM by Kary Tankink

    HIPS IPS Squelch Recurring Events


      We have written a custom rule to record changes to autorun locations, however the rule does not send all events to ePO. The custom rule is logging changes in the local log correctly, but HIPS is squelching the events flowing to ePO.


      In a HIPS IPS Custom Expert subrule, is there a way to send ALL triggered events to ePO and bypass the event squelching policies?