Yes you could disable it that way, or you can go to that point and go into the rule's properties and add DatabaseMail90.exe to the exception list. As I said in one of my earlier posts, if you are using the Enterprise edition and have a central update server and policy you need to have the McAfee administrator add the exception to the policy, or any changes you make locally will be overwritten by the policy.