The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Configure the sensitivity level for Trellix GTI

Prev Next

You can define or change the sensitivity level of Trellix GTI detection.

  1. Log on to the system as a user with administrator rights.

  2. Navigate to the default or custom directory. For example:

    cd /opt/McAfee/ens/tp/bin

  3. Run the command.

    ./mfetpcli --setoasglobalconfig --gti --sensitivity high

    The available parameters are:

    • verylow — The detections and risk of false positives are the same as with regular DAT content files. A detection is made available to Threat Prevention when Trellix Advanced Research Center publishes it instead of waiting for the next DAT content file update.

    • low — This setting is the minimum recommendation for systems with a strong security footprint.

    • medium — Use this level when the regular risk of exposure to malware is greater than the risk of a false positive. Trellix Advanced Research Center proprietary, heuristic checks result in detections that are likely to be malware. However, some detections might result in a false positive. With this setting, Trellix Advanced Research Center checks that popular applications and operating system files don't result in a false positive.

    • high — Use this setting for deployment to systems or areas which are regularly infected.

    • veryhigh — Detections found with this level are presumed malicious, but haven't been fully tested to determine if they are false positives. Trellix recommends to use this level for systems that require highest security.

    Note

    These parameters values (verylow, low, medium, high, and veryhigh) are case sensitive.

    If you already configured the sensitivity level, the latest update replaces the existing sensitivity level. Trellix GTI sensitivity level is set to Medium by default for on-access scanning and on-demand scanning.

    Tip

    You can also set Trellix GTI state and its sensitivity level using the command ./mfetpcli --setoasglobalconfig --gti --state enable --sensitivity <option>