Configure Web Control to scan all files before downloading and specify the sensitivity level to use when determining if a detected sample is malware.
Web Control performs a Trellix GTI lookup on the file. If Trellix GTI allows the file, Web Control sends the file to Threat Prevention for scanning. If a downloaded file is detected as a threat, Trellix ENS responds with the configured action and alerts the user.
Note
If users specify the complete URL to a file whose reputation is not malicious, Web Control allows the file download, even if the site is blocked.
Select Menu → Policy → Policy Catalog, then select Endpoint Security Web Control from the Products list in the left pane.
From the Category list in the right pane, select Options.
Click the name of an editable policy.
Select Enable file scanning for file downloads, then select the sensitivity level.