You can configure Endpoint Reputation from the sub-interface level. Select Policy → <Admin Domain Name> → Intrusion Prevention → Policy Manager. Endpoint Reputation for a sub-interface is configured in the same way as an interface.
Refer to the Configure Endpoint Reputation for an interface section for more information.