Host Intrusion Prevention 7.0.0 for ePO 4.0 Product Guide - McAfee

Configuring General Policies
Working with Client UI policies
User type
Regular
Disconnected
Administrator
Functionality
The average user who has the Host Intrusion Prevention client installed on a desktop or
laptop. The Client UI policy enables this user to:
• View the Host Intrusion Prevention client icon in the system tray and launch the client
user interface.
• Get pop-up intrusion alerts or prevent them.
• Create additional IPS, firewall, and application blocking rules.
The user, perhaps with a laptop, who is disconnected from the Host Intrusion Prevention
server for a period of time. The user might have technical problems with Host Intrusion
Prevention or need to perform operations without interaction with it. The Client UI policy
enables this user to obtain a time-based password to perform administrative tasks, or to
turn protection features on or off.
An IT administrator for all computers who needs to perform special operations on a client
computer, overriding any administrator-mandated policies. The Client UI policy enables
this user to obtain a non-expiring administrator password to perform administrative tasks.
Administrative tasks for both disconnected and administrator users include:
• Enabling or disabling IPS, Firewall, and Application Blocking Options policies.
• Creating additional IPS, Firewall, and Application Blocking rules if certain legitimate
activity is blocked.
NOTE: Administrative policy changes made from the ePolicy Orchestrator console will be
enforced only after the password expires. Client rules created during this time are retained
if allowed by administrative rules.
The Client UI policy contains a preconfigured policy and an editable My Default policy. You
can view and duplicate the preconfigured policy; you can, create, edit, rename, duplicate, delete,
and export editable custom policies.
On the Policy Catalog policy list page, click New Policy to create a new custom policy; click
Duplicate under Actions to create a new custom policy based on an existing policy.
Change the policy’s assignment on the Policy Assignment page. For a group, go to Systems
| System Tree, select a group, and then on the Policies tab click Edit Assignment.. For a
system go to Systems | System Tree, select a group that contains the system, and then on
the System tab, select the system and select More Actions | Modify Policies on a Single
System.
Tasks
Configuring a Client UI policy
Configuring Client UI passwords
Configuring Client UI tray icon control
Configuring Client UI troubleshooting
Configuring a Client UI policy
Use this task to determine what options are available to a Windows client computer. These
include icon display settings, intrusion event reactions, and administrator and client user access.
For non-Windows clients, only the password feature is available.
Task
For option definitions, click ? on the page displaying the options.
McAfee Host Intrusion Prevention 7.0 Product Guide for use with ePolicy Orchestrator 4.0
77