---
title: "Using Adaptive Threat Protection on managed systems"
slug: "using-adaptive-threat-protection-on-managed-systems-3"
tags: ["ENS 10.7.x", "Install and Get Started"]
updated: 2026-10-06T16:11:09Z
published: 2026-10-06T16:11:09Z
canonical: "docs.trellix.com/using-adaptive-threat-protection-on-managed-systems-3"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Adaptive Threat Protection on managed systems

You can use Trellix ePO - On-prem to configure, manage, deploy, and enforce Adaptive Threat Protection policies. Once configured, you can then use queries and dashboards to monitor your environment for threats.

### Components

Adaptive Threat Protection can integrate with these components:

- **TIE server** — A server that stores information about file and certificate reputations, then passes that information to other systems.
- **Trellix DXL** — Clients and brokers that enable bidirectional communication between the Adaptive Threat Protection module on the managed system and the TIE server.
- Threat Prevention is mandatory to install Adaptive Threat Protection.

### How Adaptive Threat Protection works

Adaptive Threat Protection functions differently, depending on whether TIE server is deployed:

- If the TIE server isn't present and the system is connected to the Internet, Adaptive Threat Protection uses Trellix GTI for reputation decisions.
- If the TIE server isn't present and the system isn't connected to the Internet, Adaptive Threat Protection determines the file reputation using information available locally.
- If the TIE server is present, Adaptive Threat Protection uses the Trellix DXL framework to share file and threat information instantly across the whole enterprise.