Trellix EDR works with Trellix Intelligent Sandbox fetch reputation information for detected threats.
To see Intelligent Sandbox reputation information and download a full report in the Monitoring dashboard, Intelligent Sandbox must be connected to Trellix EDR.
Note
Supported Intelligent Sandbox configuration: only single Intelligent Sandbox server connected to ePO - On-prem environment.
On ePO - On-prem, go to Menu → Configuration → Server Settings.
Select Trellix EDR Settings from the Setting Categories pane, then click Edit.
In the Trellix Intelligent Sandbox Connection section, enter the Host, User, and Password, then click Test connection.
Check if the Message on the right pane reads Connection Successful, then click Save.