Title

(U//FOUO) The HIPS User Interface (UI) parameter for disabling features from the tray is set correctly. (Cat II impact)

Discussion

Check Content

(U//FOUO) This check needs to be completed for every active policy that controls ePO agents. From the ePO server console, select the asset to be checked, then select ‘Policies,’ followed by ‘Host Intrusion Prevention 7: General’ from the product list. From the ‘Client UI’ category, select the applicable policy. From the ‘Advanced Options’ tab, within the Disabling Features section, ensure the ‘Allow disabling of features from the tray icon’ option is not checked. If it is checked, this is a finding.

Fix Text

(U//FOUO) From the ePO server console, select the applicable policy to be checked for HIPS. Select the Client UI. From the Advanced Options tab, de-select the parameter “Allow disabling of features from the tray icon.”

Additional Identifiers

Rule ID: SV-15155r1_rule

Vulnerability ID: V-14537

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.