Resolving third-party compatibility issues using Host Intrusion Prevention Adaptive mode

If third-party applications aren't working correctly after installing McAfee Host Intrusion Prevention 10.7.x, and you didn't preconfigure custom Firewall rules, you can enable Adaptive mode to determine whether Host Intrusion Prevention is blocking those applications.

Enabling Adaptive mode allows McAfee Host Intrusion Prevention to create client rules automatically, so that necessary applications and websites are not blocked while preserving minimum protection against vulnerabilities.

Adaptive mode analyzes events, then if the activity is considered regular and needed for business, Host Intrusion Prevention creates client rules.

By enabling Adaptive mode, you can gather the information you need for tuning your protection settings. You can then convert client rules to server-mandated policies. When tuning is complete, turn off Adaptive mode.

Best practice: To be fully protected by Host Intrusion Prevention, turn off Adaptive mode after updating your policies.

You can enable Adaptive mode in these ways:

  • From McAfee ePO — In the Firewall Options settings, then apply this policy to the client.
  • From Endpoint Security Client — In the Firewall Options settings, do one of these:
    • Click Firewall on the main Endpoint Security status page, then click Advanced and select Adaptive mode.
    • From the Action menu, select Settings, then click Firewall on the Settings page, then click Advanced and select Adaptive mode.