Host Intrusion Prevention 8.0 Patch 6 for Windows enforces partial policies incorrectly (ePO 18007 event)
技術的な記事 ID:
KB85187
最終更新: 12/22/2020
最終更新: 12/22/2020
Host Intrusion Prevention 8.0 Patch 6 for Windows enforces partial policies incorrectly (ePO 18007 event)
技術的な記事 ID:
KB85187
最終更新: 12/22/2020 環境McAfee Host Intrusion Prevention (Host IPS) 8.0
問題If McAfee Agent gives a partial policy to Host IPS 8.0 for Windows, the Host IPS partial policy persists and enforces it incorrectly.
IMPORTANT: Host IPS 8.0 If a policy enforcement anomaly occurs when signature 6065 is enabled, a 18007 event is sent to ePolicy Orchestrator (ePO). The event is displayed as a Network IPS signature event: Policy Load Status with Threat Name 6065. 原因Host IPS 8.0
If McAfee Agent tries to apply a corrupt policy, the Host IPS client rejects the corrupt policy and retains the "last known good" policy settings. NOTES:
解決策Install the newest Host IPS signature. Newer signatures have a Status advanced parameter that maintains one of the following values:
IPS-related events can be queried from the ePO 関連情報言語:技術用語集 |
|