Use the Appliance Settings: Blocked List page to configured rules on a blocked list, which allows you to control which messages must be considered as malicious based on the matched email entries.
Important
Trellix recommends that you apply the same configuration changes on all managed appliances. If you edit a rule that is not common to all appliances and then apply the rule to the appliance group, the edited rule will be applied to all appliances in that group, including those appliances that did not have the rule.
To configure rules:
Click Settings and then select Appliance Settings.
Click Blocked List in the sidebar.
(Optional) Use the controls at the top of the page to define the scope of the changes.