Host Intrusion Prevention 7.0.0 for ePO 4.0 Product Guide - McAfee

Configuring Firewall Policies
Working with Quarantine Options policies
Working with Quarantine Options policies
The Quarantine Options policy turns on and off quarantine mode and quarantine notifications,
defines quarantined networks, and configures fail options.
This policy category contains a preconfigured policy, which has all settings disabled, and an
editable My Default policy. You can view and duplicate preconfigured policies; you can, create,
edit, rename, duplicate, delete, and export custom policies.
On the Policy Catalog policy list page, click New Policy to create a new custom policy; click
Duplicate under Actions to create a new custom policy based on an existing policy.
Change the policy’s assignment on the Policy Assignment page. For a group, go to Systems
| System Tree, select a group, and then on the Policies tab click Edit Assignment.. For a
system go to Systems | System Tree, select a group that contains the system, and then on
the System tab, select the system and select More Actions | Modify Policies on a Single
System.
Tasks
Configuing the Quarantine Options policy
Configuing the Quarantine Options policy
Use this task to enable or disable quarantine mode and set other quarantine options.
Task
For option definitions, click ? on the page displaying the options.
1 Go to Systems | Policy Catalog and select Host Intrusion Prevention: Firewall in
the Product list and Quarantine Options in the Category list. The list of policies appears.
2 In the Quarantine Options policy list, click Edit under Actions to change the settings
for a custom policy.
Figure 23: Quarantine Options
3 In the Firewall Options page that appears, make any needed changes, then click Save.
64
McAfee Host Intrusion Prevention 7.0 Product Guide for use with ePolicy Orchestrator 4.0