Host Intrusion Prevention 7.0.0 for ePO 4.0 Product Guide - McAfee

Configuring Firewall Policies
Working with Firewall Rules policies
Change the policy’s assignment on the Policy Assignment page. For a group, go to Systems
| System Tree, select a group, and then on the Policies tab click Edit Assignment. For a
system go to Systems | System Tree, select a group that contains the system, and then on
the System tab, select the system and select More Actions | Modify Policies on a Single
System.
Tasks
Configuring the Firewall Options policy
Configuring the Firewall Options policy
Use this task to turn the firewall on and off and to apply adaptive or learn mode.
Task
For option definitions, click ? on the page displaying the options.
1 Go to Systems | Policy Catalog and select Host Intrusion Prevention: Firewall in
the Product list and Firewall Options in the Category list. The list of policies appears.
2 In the Firewall Options policy list, click Edit under Actions to change the settings for a
custom policy.
Figure 19: Firewall Options
3 In the Firewall Options page that appears, make any needed changes, then click Save.
Working with Firewall Rules policies
Firewall rules determine how a system operates when it intercepts network traffic, permitting
or blocking it. You create and manage firewall rules by applying a Firewall Rules policy with
the appropriate settings.
This policy category contains six preconfigured policies and an editable My Default policy. You
can view and duplicate the preconfigured policy; you can edit, rename, duplicate, delete, and
export editable custom policies.
Preconfigured policies include:
Minimal (Default)
• Blocks any incoming ICMP traffic that an attacker could use to gather information about
your computer. Host Intrusion Prevention allows all other ICMP traffic.
McAfee Host Intrusion Prevention 7.0 Product Guide for use with ePolicy Orchestrator 4.0
57