Network communication protection rules monitor or block incoming or outgoing data on your network. They are supported on Trellix DLP Endpoint - SaaS for Windows.
Network communication protection rules control network traffic based on specified network addresses (required) and ports (optional). You can also specify incoming or outgoing connections, or both. You can add one network address definition and one port definition, but definitions can contain multiple addresses or ports.
Use classification definitions to limit the rule to specific content fingerprinting criteria. You can also limit the rule to local users or to specified user groups, and by specifying the application creating the connection.
Note
Network communication protection rules on Trellix DLP Endpoint - SaaS for Windows do not check content classification criteria. Use content fingerprinting criteria when defining classifications used with network communication protection rules.