Cannot create custom IPS signatures with an EXCLUDE and INCLUDE statement in the Subrule
Technical Articles ID:
KB82609
Last Modified: 7/27/2020
Environment
McAfee Host Intrusion Prevention (Host IPS) 8.0
Problem
You cannot create Host IPS 8.0 custom IPS signatures with an EXCLUDE and INCLUDE statement in the Subrule. After saving the policy, the Subrule entries become corrupted.
Solution
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one.
