You can enable riskware detection for Trellix Riskware rules separately from the custom riskware rules that you configure on the File Protect appliance.
Note
On appliances that support riskware detection, Trellix Riskware rules are enabled to alert by default.
You can enable and disable Trellix Riskware rules by using the File Protect appliance Web UI or CLI:
After you have configured the appliance to detect riskware rules, you can view the analysis results on the eAlerts > Riskware page in the Web UI.
Prerequisites
Administrator or Operator access to the File Protect appliance.
An established connection to the Internet.
A connection to the DTI Cloud.