At a specified interval, the xAgent establishes a secure connection with the appliance and downloads the latest indicators. Indicator update packages are signed and encrypted files containing versioned sets of indicators and conditions. This setting is also called the indicator refresh interval.
Valid values for the indicator update frequency range from 60 to 86400 seconds. The indicator update frequency distributed with the Trellix Endpoint xAgent software is 1800 seconds (30 minutes).
You can set the indicator update frequency using the Web UI or the API. This section covers how to configure the indicator update frequency for real-time indicator detection indicator using the Web UI. See the Endpoint Security (HX) REST API Guide for more information on configuring your real-time indicator settings.
Admin access to the Web UI