The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Configure Adaptive Threat Protection with no connection to Trellix GTI

Prev Next

For systems with no network connection to Adaptive Threat Protection, such as air-gapped systems, you can improve performance by manually disabling Adaptive Threat Protection.

Disable Adaptive Threat Protection to eliminate unnecessary attempts to connect to Adaptive Threat Protection when no network path exists and reduce the impact on Endpoint Security performance.

Caution

Disabling Adaptive Threat Protection might result in increased false positives.

Task
  1. Select MenuPolicyPolicy Catalog, then select Endpoint Security Threat Prevention from the Products list in the left pane.

  2. From the Category list in the right pane, select On-Access Scan.

  3. Click the Edit link for an editable policy.

  4. In the Trellix GTI section, deselect Enable Trellix GTI, then click Save.

  5. In the Policy Catalog, select Endpoint Security Adaptive Threat Protection from the Products list in the left pane.

  6. Click Options.

  7. Click the Edit link for an editable policy.

  8. Click Show Advanced.

  9. In the Reputation Source section, click the drop-down list and select Use only the TIE server, then click Save.