'Action Taken' incorrectly reports 'Threat Intelligence Blocked' (when 'Would' and 'Allow' Endpoint Security Threat Prevention events occur)

Technical Articles ID: KB87977
Last Modified: 5/11/2020

Environment

McAfee Endpoint Security (ENS) Threat Intelligence 10.2.x, 10.1.x
McAfee ENS Threat Prevention 10.2.x, 10.1.x

Problem

Action Taken incorrectly reports Threat Intelligence Blocked when Would and Allow ENS Threat Prevention events occur.

Example:
Rule 153 results in event 35102; an Observe mode 'Would Allow' event is reported as Action Taken 'Blocked'.

Cause

ENS Threat Prevention event flow and categorization does not properly report these events.

Solution

This issue is resolved in ENS Threat Intelligence 10.2.2.

McAfee product software, upgrades, maintenance releases, and documentation are available from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Affected Products

Endpoint Security Threat Intelligence
Known Issue/Product Defect

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

'Action Taken' incorrectly reports 'Threat Intelligence Blocked' (when 'Would' and 'Allow' Endpoint Security Threat Prevention events occur)

Environment

Problem

Cause

Solution

Affected Products

Glossary of Technical Terms

Title

Title

Featured Solutions:Draft for New Nav

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

'Action Taken' incorrectly reports 'Threat Intelligence Blocked' (when 'Would' and 'Allow' Endpoint Security Threat Prevention events occur)

Environment

Problem

Cause

Solution

Affected Products

Glossary of Technical Terms

Choose your region

Title

Title