Generate IPS Policy Assignment reports

The IPS Policy Assignment provides a detailed view of the policies - Exploit, Reconnaissance, and DoS - applied to one or more Sensors. Policy information includes severity, responses, thresholds, notifications, and other information configured for each attack whether from a pre-configured or user-customized policy. Also, you can view attack set profile, and DoS ID settings for all of the policies applied within a Sensor. The Customized Attacks option consolidates all user-customized attacks into one section for easy viewing.

To generate an IPS Policy Assignment report for a Sensor, do the following:

1. Click the Manager tab from the Manager Home page.
2. Select <Admin Domain Name> → Reporting → Configuration Reports → IPS Policy Assignments.
3. Select one or more Devices.

   Tip

   Sensor Policy Configuration Reports can be very long when multiple Sensors are selected. Trellix recommends selecting a single Sensor for ease of readability.

4. Select one or more of the following based on what information you want to see in the report:
   • Reconnaissance Policy
   • Exploit/DoS Policy
     • IPS Policy Detail
     • DoS Detail
     • Attack Set Profile Detail
     • Recon Attacks
   • Customized Attacks
5. Select the Output Format.
6. Click Submit.