Creating policies with rule sets

Prev Next

Rule sets define Trellix DLP – SaaS policies. A rule set can contain a combination of data protection, device control, discovery rules, and application control rules. Rule definitions apply to all rule sets.

The Rule Sets page displays a list of defined rule sets and the status of each. The display includes the number of incidents logged for each rule set, how many rules have been defined, and how many enabled. Colored icons indicate the types of rules enabled. The tooltip displayed when mousing over icons shows the type of rule and number of enabled rules.

Rule Sets page showing tooltip information
Rule Sets page showing tooltip information


In Rule set aaa (1), one data protection rule is defined, and it is enabled (1/1 at the left of theData Rules section). The blue icons show which types of rules are defined. The tooltip shows one of these is a screen capture protection rule. To view which rules are defined but disabled, open the rule for editing.