You can enable riskware detection for Trellix Riskware rules separately from the custom riskware rules that you configure on the Email Security - Server appliance.
Note
On appliances that support riskware detection, Trellix Riskware rules are enabled to alert by default.
You can enable and disable Trellix Riskware rules by using the Email Security - Server appliance Web UI or CLI:
After you have configured the appliance to detect riskware rules, you can view the analysis results on the eAlerts > Riskware page in the Web UI.
Prerequisites
Administrator or Operator access to the Email Security - Server appliance.
An established connection to the Internet.
A connection to the DTI Cloud.