Enabling or disabling Trellix Riskware detection using the CLI

Prev Next

Use the CLI commands to globally enable or disable the Trellix Riskware rules on the appliance.

note.png

Riskware detection for Trellix Riskware rules are enabled by default.

To globally enable the Trellix Riskware rules for alerts:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Enable the Trellix Riskware rules on the appliance.

    hostname (config) # analysis riskware policy fe-rules enable
  3. hostname (config) # write memory

    Save your changes.

To globally disable the Trellix Riskware rules for alerts:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Disable Trellix riskware rules on the appliance.

    The following message is displayed:

    hostname (config) # no analysis riskware policy fe-rules enable
    % The rules are now disabled.Trellix recommends re-enabling these rules for security reasons.
  3. Save your changes.

    hostname (config) # write memory