Enabling Real-Time Indicator Detection for All Host Endpoints

Prev Next

To enable the real-time indicator detection on all host endpoints:

  1. Log in to the Web UI as an administrator.

  2. From the Admin menu, select Policies to access the Policies page.

  3. From the Policies table, select the Agent Default Policy and click the policy link to access the Edit Policy page.

  4. Select the Real-Time Indicator Detection tab.

    Policy_RTID_Tab.png
  5. Toggle the Real-Time Indicator Detection ON/OFF switch to ON to enable real-time indicator detection.

    Policy_RTID_Enable.png
  6. Click Save.

Note

Enabling real-time indicator detection launches the following process:

/opt/fireeye/bin/rte-sensor

See Real-Time Indicator Detection Sensor for additional features of the rte-sensor process.