The list below shows which values permit the use of wildcards in Host IPS 8.0 IPS exceptions. The list includes commonly used values; this list is not all-inclusive.

Permitted:

• Executable and Target Executable details:
  • File Name
  • File Description
• IPS Parameters:
  • Detail Event Info
  • API parameter
  • User name

Not permitted:

• Executable and Target Executable details:
  • Fingerprint
  • Signer
• Firewall
  • FQDN rules (for example, *.domain.com)
  • Port numbers - must be a single port value, range of port values, or comma-delimited (up to four items)
  • Registry key value criteria for Location Aware Groups