Press CTRL+K to open search

Source and destination addresses

  • Published on Aug 25, 2026
  • 1 minute(s) read
Prev Next

For Malware Analysis, Central Management System, File Protect, and Network Security appliances, Trellix alert notification messages include the source and destination addresses of traffic observed on the appliance.

Except for IPS, the source address represents the victim, and the destination address represents the attacker. The same host address convention is used throughout the Web UI and CLI of the Trellix appliances.

For the Network Security and Central Management System appliances, you can change the notification source and destination values using the fenotify preferences normalize-ips-event enable command. For more information, see the CLI Reference.

:
Related articles
  • Management path
    Malware Analysis (AX) > Malware Analysis System Administration Guide Release 10.x > Overview > About the Malware Analysis appliance
  • Network Security and Email Security — Server appliances
    Helix > Trellix Helix Integration Guide for Trellix Devices > Planning > Integration tasks > Customer tasks
  • Management path
    Malware Analysis (AX) > Malware Analysis System Administration Guide Release 11.x > Overview > About the Malware Analysis appliance
  • About DTI network communication
    Malware Analysis (AX) > Malware Analysis System Administration Guide Release 10.x > Configuration > The DTI network
Lorem Ipsum is simply dummy text of the printing and typesetting industry. Lorem Ipsum has been the industry's standard dummy.
Products
Company
Top Features
Solutions
Existing Users
Connect With Us
Sales and Support
Copyright © Abc Inc. All Rights Reserved