Use the CLI commands to globally enable or disable the Trellix Riskware rules on the appliance.
Note
Riskware detection for Trellix Riskware rules are enabled by default.
To globally enable the Trellix Riskware rules for alerts:
hostname (config) # write memory
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Enable the Trellix Riskware rules on the appliance.
hostname (config) # analysis riskware policy fe-rules enable
Save your changes.
To globally disable the Trellix Riskware rules for alerts:
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Disable Trellix riskware rules on the appliance.
hostname (config) # no analysis riskware policy fe-rules enable
The following message is displayed:
% The rules are now disabled.Trellix recommends re-enabling these rules for security reasons.Save your changes.
hostname (config) # write memory