Endpoint Protection

 View Only

  • 1.  Network Threat Protection IPS

    Posted Dec 30, 2009 03:39 PM

    Is it possible to unblock an IP address that's been blocked by Intrustion Prevention? I know you can do exclusions... but I want to know for an IP address that is already blocked.



  • 2.  RE: Network Threat Protection IPS

    Posted Dec 31, 2009 01:43 AM
    Hi,

    If IPS is blocking an IP address, you can also see the SID it is using to block that traffic.

    You can create an exception for that SID as well.

    Aniket


  • 3.  RE: Network Threat Protection IPS
    Best Answer

    Posted Dec 31, 2009 08:30 AM
    Greetings,

    As far as I am aware there is not a way to lift this block without either waiting the block period (default 10 minutes) or uninstalling the SEP client from the machine you want to access the blocked IP on.

    You can only turn on and off the blocking of IP addresses or exclude the IP address beforehand, once its blocked you have the two above options.