Adaptive Threat Protection

Adaptive Threat Protection is an optional Trellix ENS module that analyzes content from your enterprise and decides what to do based on file reputation, rules, and reputation thresholds.

Note

Adaptive Threat Protection is supported on systems managed by ePO - On-prem and systems managed by Trellix ePolicy Orchestrator - SaaS. Adaptive Threat Protection is not supported on standalone systems.

Adaptive Threat Protection includes the ability to contain, block, or clean files, based on reputation.

Adaptive Threat Protection is an optional Trellix ENS module. For additional threat intelligence sources and functionality, deploy the Threat Intelligence Exchange server. For information, contact your reseller or sales representative.

Note

For installing Adaptive Threat Protection, you must have installed Trellix ENS Threat Prevention and Trellix^® Data Exchange Layer.

Adaptive Threat Protection with TIE server and Trellix DXL

If TIE server and Trellix DXL are not present, Adaptive Threat Protection communicates with Trellix GTI for file reputation information.

Adaptive Threat Protection with Trellix GTI