Alert types and appliance editions

SmartVision Edition appliances detect and distribute alerts for malware object downloads, riskware object downloads, and events (including data exfiltration events).

SmartVision-enabled Network Security sensors and integrated appliances detect all network event types, including Trellix IPS events (if IPS detection is enabled).

In a Helix environment, all appliances inform Helix of network events.

The following table summarizes SmartVision appliance alert distribution capabilities:

Network event types detected by SmartVision appliances		Alert distribution methods supported
SmartVision edition sensor or integrated appliance	SmartVision‑enabled Network Security sensor or integrated appliance	Alert distribution methods supported
Malware Events
―	Domain Match	Trellix event notification services JSON object sent to Helix
―	Infection Match
―	Malware Callback
Malware Object	Malware Object
―	Web Infection
Riskware Events
―	Riskware Callback	Trellix event notification services JSON object sent to Helix
―	Riskware Infection
Riskware Object	Riskware Object
Other Events
―	IPS Critical	Trellix event notification services JSON object sent to Helix
SmartVision Event	Event

Trellix event notifications for SmartVision alerts are disabled by default. When SmartVision alert distribution is enabled, notifications can be filtered by severity.