To improve security and performance on a Trellix DLP Network Prevent appliance dedicated to analyzing email traffic, you can close the ICAP ports.
In ePO - On-prem, open the Policy Catalog.
Select the DLP Appliance Management product, select the Trellix DLP Network Prevent Web Settings category, and open the policy that you want to edit.
In Web Settings, deselect both the ICAP service options.
Click Save.