The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Skipping loading of certain signatures

Prev Next

Exploit prevention skips loading of signatures when policy rule ID is not part of any rule in content.

Exploit prevention content carries signatures definitions, these signatures can be conditional based signatures. For example, certain signatures are valid for few versions of product.

During policy enforcement when the rule ID in the policy does not match with the rule ID present in the content, then the rule will not be enforced to the kernel.