To determine whether Adaptive Threat Protection on the client system gets file reputations from TIE server or Trellix GTI, you can check the Trellix Endpoint Security (ENS) Client About page.
Open the Trellix Endpoint Security (ENS) Client.
From the Action menu
, select About.Click Adaptive Threat Protection on the left.
The Connection status field indicates one of the following for Adaptive Threat Protection:
Threat Intelligence Connectivity — Connected to TIE server for enterprise-level reputation information.
Trellix GTI Connectivity only — Connected to Trellix GTI for global-level reputation information.
Disconnected — Not connected to TIE server. Adaptive Threat Protection determines the file reputation using information either through GTI or local system.