Use this file to discover all available pages before exploring further.
The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.
For any rule, you can modify its enabled state by clicking the checkbox in the row for that rule. When a rule is disabled, it is not included in the rule set that an endpoint will use to match to events. Disabling a rule does not delete it, it just omits it from being used. You can find this useful when attempting to isolate detection behaviors, or when you are composing new rules that are not ready to be used. When you modify the enabled state of a rule, this change is picked up by the IOC Streaming module.
Email Security - Server > Email Security - Server User Guide Release 11.x > Configuration > Rule configuration on allowed and blocked lists > About advanced rules
Data Loss Prevention (DLP) > Data Loss Prevention SaaS > Trellix Data Loss Prevention - SaaS Product Guide - February 2026 > Using rules and policies to protect sensitive content > Create and configure rules and rules sets
Data Loss Prevention (DLP) > Data Loss Prevention On-prem > Trellix Data Loss Prevention 11.11.x Product Guide > Using rules and policies to protect sensitive content > Create and configure rules and rules sets
in the row for that rule. When a rule is disabled, it is not included in the rule set that an endpoint will use to match to events. Disabling a rule does not delete it, it just omits it from being used. You can find this useful when attempting to isolate detection behaviors, or when you are composing new rules that are not ready to be used. When you modify the enabled state of a rule, this change is picked up by the IOC Streaming module.