Dynamic Application Containment page

You can change whether Trellix-defined containment rules block or report, but you can't otherwise change or delete these rules.

• Block (only) — Blocks, without logging, contained applications from performing actions specified by the rule.
• Report (only) — Logs when applications try to perform actions in the rule, but doesn't prevent applications from performing actions.
• Block and Report — Blocks and logs access attempts.
• Block All — Selects or deselects Block for all rules.
• Report All — Selects or deselects Report for all rules.

To disable the rule, deselect both Block and Report.

• Add — Adds a process to the exclusion list.
• Delete — Deletes the selected item.
• Actions —
  • Edit — Changes the selected item.
  • Duplicate — Creates a copy of the selected item.