I was looking at how best to set up user based policies for IPS, I would like the ability to stop certain services to certain users and allow them for other users.
I have noticed the exception rule in the Advanced IPS section, but this simply ensures that that IP address is not subjected to any IPS rules.
I can understand that this form of user policy based IPS may be heavy on hardware but I feel it is a necessary feature, similar to the content filter policy rules.
Anyone got any similar thoughts on this?
This thread was automatically locked due to age.
