HIPS rules

This window gives you an overview of existing HIPS rules.

Columns

Rule - User-defined or automatically chosen rule name.

Enabled - Deactivate this switch if you want to keep the rule in the list but do not want to use it.

Action - The rule specifies an action - Allow, Block or Ask - that should be performed if the conditions are right.

Sources - The rule will be used only if the event is triggered by an application(s).

Targets - The rule will be used only if the operation is related to a specific file, application or registry entry.

Log - If you activate this option, information about this rule will be written to the HIPS log.

Notify - A small pop-up window appears in the lower-right corner if an event is triggered.

hips_rules_main

Control elements

Add - Creates a new rule.

Edit - Enables you to edit selected entries.

Remove - Removes selected entries.

note_icon_example EXAMPLE

In the following example, we will demonstrate how to restrict unwanted behavior of applications:

1.Name the rule and select Block from the Action drop-down menu.

2.Enable the Notify user switch to display a notification any time that a rule is applied.

3.Select at least one operation for which the rule will be applied. In the Source applications window, select All applications from the drop-down menu to apply your new rule to all applications attempting to perform any of the selected application operations on the applications you specified.

4.Select Modify state of another application (all operations are described in product help, which can be accessed by pressing F1).

5.Select Specific applications from the drop-down menu and Add one or several applications you want to protect.

6.Click Finish to save your new rule.