If a Host Intrusion Prevention (Host IPS) 7.0 policy uses wildcard characters incorrectly, the migrated policy will contain duplicate wildcard characters.
Example:
A Host IPS 7.0 policy rule with incorrect wildcard syntax is as follows:
*\Program Files\**\MyTestApp.exe
After running the Host IPS 8.0 Policy Migration Task, the result is as follows:
**\Program Files\****\MyTestApp.exe
NOTE: The migrated Host IPS 8.0 policy functions normally.
Host IPS 7.0 wildcard syntax:
|
Character
|
Description
|
|
? (question mark)
|
A single character.
|
|
* (asterisk)
|
Multiple characters.
*\test\abc.txt
|
|
& (ampersand)
|
Multiple characters except / and \. Use to match the root-level contents of a folder but not any subfolders.
C:\test\&.txt
|
Host IPS 8.0 wildcard syntax is outlined in the product guide on pages 42 and 43. They should display as:
|
Character
|
Description
|
|
? (question mark)
|
A single character.
|
|
* (one asterisk)
|
Multiple characters, excluding / and \.
Use to match the root-level contents of a folder with no subfolders.
|
|
** (two asterisks)
|
Multiple characters, including / and \.
|
|
| (pipe)
|
Wildcard escape.
NOTE: For ** the escape is |*|*.
|
