Views:

If an Intrusion Prevention Alert is raised on a Cloud One Agent due to a compilation failure of IPS rules, it may be related to the Port List used by Web Reputation. To resolve this issue, you will need to update the Port List to use other ports.

 

First, create a Port List called Trend Micro Smart Protection:

  1. Log in to the web console with administrator privileges.
  2. Create a custom port list. On the web console, go to Policies > Lists > Port Lists.
  3. Click New > New Port Lists.
  4. Enter a name and description for the port list. You may use Trend Micro Smart Protection for the name.
  5. Under ports input the ports listed below, one port per line: 80, 443, 5274, 5275.

Then, change the Web Reputation Port List Monitor on the affected agent:

  1. On the web console, go to Computers and select the necessary computer.
  2. Navigate to Web Reputation > Advanced > Ports and set the value to the new Port list created 'TrendMicro Smart Protection' (80, 443, 5274, 5275).
  3. Save the changes, and wait for the policy to be applied.
  4. Clear the warning and check status to refresh agent status and see if the issue persists.

If the issue persists, please contact Trend Micro Technical Support. 

Keywords: Intrusion Prevention Rule, Intrusion Prevention Rule Compilation Failed, port list