Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 Guia de Instalação descarregar pdf (Página 38)

3 Set debugging: Select Help | Troubleshooting and enable full debug logging for firewall

and IPS).

4 Ensure that both Host IPS and Network IPS are disabled.

5 Open a command prompt and run net start enterceptagent to start the client service.

If the service still fails to start, check the FireSvc.log file for any Error or Warning message that

may yield clues as to why the service is not starting.

Verify Host IPS events are triggered correctly

After checking that the client was installed correctly and is running, check to see if IPS protection

is working. First make sure that Host IPS is enabled in the client console. Next, create a new

text document in the client installation directory: C:\Progarm Files\McAfee\Host Intrusion

Prevention. This action should be blocked and an error message indicating you do not have

permission to save in this location should appear. Check the HipShield.log file and search upward

from the bottom for a violation. Verify that the following signature was triggered: 1001 Windows

Agent Shielding -- File Modification.

Stopping the Windows client

You may need to stop a running client and restart it as part of troubleshooting.

Task

1 Disable IPS protection if enabled. Use one of these procedures:

• Set IPS Options to Off in the ePO console and apply the policy to the client.

• Open the client console and on the IPS Policy tab, deselect Enable Host IPS.

NOTE: Firewall protection does not need to be disabled to stop the client.

2 Open a command prompt and run: net stop enterceptagent

Restarting the Windows client

You may need to restart a client you had stopped as part of troubleshooting.

Task

1 Open a command prompt and run: net start enterceptagent

2 If you disabled IPS protection, use one of these procedures to reenable it:

• Set IPS Options to On in the ePO console and apply the policy to the client.

• Open the client console and on the IPS Policy tab, select Enable Host IPS.

Installing the Windows Client

Stopping the Windows client

McAfee Host Intrusion Prevention 8.0 Installation Guide38

1 2 ... 33 34 35 36 37 38 39 40 41 42 43 ... 48 49

Sem comentários

Red Hat SYSTEM 8.0 - MIGRATION GUIDE 7.X TO 8.0 Guia de Instalação Página 38