SmartVision Edition appliances detect and distribute alerts for malware object downloads, riskware object downloads, and events (including data exfiltration events).
SmartVision-enabled Network Security sensors and integrated appliances detect all network event types, including Trellix IPS events (if IPS detection is enabled).
In a Helix environment, all appliances inform Helix of network events.
The following table summarizes SmartVision appliance alert distribution capabilities:
Network event types detected by SmartVision appliances
Alert distribution methods supported
SmartVision edition sensor or integrated appliance
SmartVision‑enabled Network Security sensor or integrated appliance
Malware Events
―
Domain Match
Trellix event notification services
JSON object sent to Helix
―
Infection Match
―
Malware Callback
Malware Object
Malware Object
―
Web Infection
Riskware Events
―
Riskware Callback
Trellix event notification services
JSON object sent to Helix
―
Riskware Infection
Riskware Object
Riskware Object
Other Events
―
IPS Critical
Trellix event notification services
JSON object sent to Helix
SmartVision Event
Event
Trellix event notifications for SmartVision alerts are disabled by default. When SmartVision alert distribution is enabled, notifications can be filtered by severity.