The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in November 2026. We hope you enjoy the updated experience.

Rule page

Prev Next

Add or edit user-defined Access Protection rules.

Access Protection settings apply to Windows and Linux systems only.

Option definitions
Section Option Definition
Options Name Specifies or indicates the name of the rule. (Required)
Action Specifies actions for the rule.
  • Block (only) — Blocks access attempts without logging.
  • Report (only) — Warns without blocking access attempts.
  • Block and Report — Blocks and logs access attempts.

To disable the rule, deselect both Block and Report.

Executables Specifies executables for the rule.

The executable is the process that performs the subrule operation on the subrule target.

  • Add — Creates an executable and adds it to the list.
  • Delete — Deletes the selected item.
  • Toggle Inclusion Status — Changes the inclusion status of the item between Include and Exclude.
  • Actions —
    • Edit — Changes the selected item.
    • Duplicate — Creates a copy of the selected item.
User Names Specifies user names that the rule applies to (for user-defined rules only).
  • Add — Selects a user name and adds it to the list.
  • Delete — Deletes the selected item.
  • Toggle Inclusion Status — Changes the inclusion status of the item between Include and Exclude.
  • Actions —
    • Edit — Changes the selected item.
    • Duplicate — Creates a copy of the selected item.
Subrules Configures subrules (for user-defined rules only).
  • Add — Creates a subrule and adds it to the list.
  • Delete — Deletes the selected item.
  • Actions —
    • Edit — Changes the selected item.
    • Duplicate — Creates a copy of the selected item.
Notes Provides more information about the item.