Malware definitions

Malware Protection uses malware definitions to detect and identify files infected by malware. You can download malware definitions from the Endpoint Security server or from a custom content server. You cannot download malware definitions from Trellix 's Dynamic Threat Intelligence (DTI) cloud.

Malware definition updates require a direct Internet connection to Trellix malware definition servers or a custom content server. Host endpoints that work offline or in local mode will not receive malware definition updates.
Important
Custom content server capability is only available to xAgent versions 33 and higher.
Malware definition updates via proxy server are supported in Endpoint Security (HX) xAgent version 25 or later.
Malware definition updates are not performed if the CONTENT_UPDATES license for your HX server is not active or has expired.