Trellix continuously updates the rule signatures used by a device to examine network traffic and are available for download from the central server. These rule updates can be retrieved automatically or manually.
Set up overrides for the actions taken when the retrieves rules from the server.
On the Policy Editor, click
.png "GUID-1AC27E71-C030-4273-90E4-91E337946AFF-low.png")
.On the Rules Update line, click Update.
Set Trellix ESM to retrieve updates automatically or check for updates now.
If updates were downloaded manually, click
.png "GUID-A5690870-A648-4CC7-B1B1-F092A03B5C3B-low.png")
to apply them.To view the manual updates, do the following:
In the Filters/Tagging pane, click the Advanced bar.
In the Rule Status field, select Updated, New, or Update/New to indicate the type of updated rules you want to view.
Click
.png "GUID-9E27FAD7-66B6-444F-A303-6A2D91FAFBD1-low.png")
to run the query.