For systems with no network connection to Adaptive Threat Protection, such as air-gapped systems, you can improve performance by manually disabling Adaptive Threat Protection.
Make sure that the interface mode for the Trellix Endpoint Security (ENS) Client is set to Full access or log on to the Trellix Endpoint Security (ENS) Client as administrator.
Note
Policy changes from ePO - On-prem overwrite changes from the Settings page.
Disable Adaptive Threat Protection to eliminate unnecessary attempts to connect to Adaptive Threat Protection when no network path exists and reduce the impact on Trellix ENS performance.
Caution
Disabling Adaptive Threat Protection might result in increased false positives.
Open the Trellix Endpoint Security (ENS) Client.
Click Threat Prevention on the main Status page.
Or, from the Action menu
.png)
, select Settings, then click Threat Prevention on the Settings page.In the On-Access Scan, Trellix GTI section, deselect Enable Trellix GTI.
Click Adaptive Threat Protection.
Click Show Advanced.
In the Reputation Source section, click the drop-down list and select Use only the TIE server.
Click Apply.