3 Replies Latest reply on Mar 3, 2017 1:55 AM by syedali

    ePO 5.3.1 no longer receiving threat events from HIPS 8

    dkilbern

      Upgraded from 5.1.1 to 5.3.1. Afterwards most (only 5 out of 35 windows systems) are reporting threat events from HIPS. and only those 5 are showing Firewall/IPS etc as enabled on the dashboard. But if you look at the server then you see that it is listed as enabled. They are using the same policy so its not a policy issue...

       

      MA  5.0.4.449

      ePO 5.3.1 latest Hotfix

      HIPS 8.0 Patch 8

       

      Not sure why or what is causing this....not seeing anything in the logs. Have removed HIPS and reinstalled....do see event ID 1119 Update failed. See log but that seems to be VSE but it looks like it occurs around the same time the events quit populating.

       

      Any help appreciated.