KB ID 0000116
Problem
Event 257
VirusScan Enterprise, message: Would be blocked by behaviour blocking rule (rule is currently in warn mode) (warn only mode!).(from <source> IP <IP> user <user> running VirusScan Enter 8.0 OAS)
Event 258
Would be blocked by port blocking rule (rule is in warn-only mode)
Solution
McAfee Anti Virus
This harmless alert, which can be ignored. To stop this logging to the event log, open the Viruscan Console, go to Tools -> Alerts -> Additional alerting options, and select “Suppress all except severe alerts (severity <4)”.
If you are using ePO, you will have to adjust the policies in the same manner.
For ePO Managed Machines.
1. Log into ePO, Select “System Tree” > Assigned Policies > Change the prodict to “Virus Scan Enterprise (version) > Alert Policies > My Default.
2. Change the drop down from workstationserver as approriate > Additional allerting Options > “suppress all exept severe alers (severtity <4) > Save.
Related Articles, References, Credits, or External Links
NA
