PDA

View Full Version : Question about NIS 2009 HIPS

mvdu
October 3rd, 2008, 03:27 PM
I noticed that when I had it installed, it wouldn't let me use both Automatic Program Control AND the activity analyzer (HIPS.) Why can't I have both on? Wouldn't I have to use a separate HIPS?
trjam
October 3rd, 2008, 04:15 PM
no, you actually dont need a separate HIPS.
vijayind
October 3rd, 2008, 04:37 PM
As far as I know,
Automatic Program Control - Whitelist/Blacklist based protection
Activity Analyzer - HIPS

Now if you have already some other HIPS product you can choose the former. The latter (Activity Analyzer) includes whitelist and monitors any other app (no blacklist).

Hence the choice of any 1 methodology.
mvdu
October 3rd, 2008, 06:08 PM
But if you choose Automatic Program Control, wouldn't a separate HIPS be recommended if you want an HIPS?
vijayind
October 4th, 2008, 04:56 AM
-{ Quote: "But if you choose Automatic Program Control, wouldn't a separate HIPS be recommended if you want an HIPS?" }-
If you choose APC, you can use any alternative HIPS like DefenseWall without fear of conflict.
Else there could be some overlap, which could result in system instability.