Title

(U//FOUO) The HIPS policy enables Network IPS. (Cat I impact)

Discussion

Check Content

(U//FOUO) This check needs to be completed for every active policy that controls ePO agents. From the ePO server console, select the asset to be checked, then select ‘Policies,’ followed by ‘Host Intrusion Prevention 7:IPS’ from the product list. From the ‘IPS Options’ category, select the applicable policy. From the Windows Only section, ensure the ‘Enable Network IPS’ is checked. If the ‘Enable Network IPS’ is not checked, this is a finding.

Fix Text

(U//FOUO) From the ePO server console, select the applicable policy to be checked for HIPS for the ePO server. Select IPS Options. From the IPS Options tab, ensure the “Enable Network IPS” is checked.

Additional Identifiers

Rule ID: SV-15162r1_rule

Vulnerability ID: V-14544

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.