The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Excluding Spyware from Malware Protection Processing

Prev Next

You can enable and disable the spyware exclusion from quarantine and malware protection processing for all of your host sets using the agent default policy. You can also exclude spyware from quarantine and malware protection processing for specific host sets in your environment using a custom exclusion policy.

Important

Malware protection processing (malware detection) and quarantine must be enabled, or the spyware exclusion is ignored.

This section covers how to use the Web UI to exclude spyware from quarantine and malware protection processing. See the Endpoint Security (HX) REST API Guide for information on using the API to exclude spyware from quarantine and malware protection processing.