By default, the throttling feature is enabled for events, inventory updates, and policy discovery requests.
Enabling or disabling this feature also enables or disables all its subfeatures.
On the ePO - On-prem console, select Menu → Policy → Policy Catalog.
Select the Solidcore 8.x.x: General product.
In the Configuration (Client) category, click Duplicate for the Trellix Default policy.
Specify the policy name, then click OK.
Open the policy and click the Throttling tab.
Enable or disable throttling by clicking Enable Throttling.
This enables or disables the throttling feature for events, inventory updates, and policy discovery requests.
(Optional) Disable the throttling feature selectively for Events, Inventory Updates, and Policy Discovery (Observations).
When the throttling feature is enabled, you can disable one or more types of throttling by deselecting the corresponding checkbox.
Save the policy and apply it to the relevant endpoints.