The IPS Policy Assignments report provides a detailed view of the policies - Exploit and DoS - applied to one or more Sensors. Policy information includes severity, responses, thresholds, notifications, and other information configured for each attack whether from a pre-configured or user-customized policy. Also, you can view attack set profile, and DoS ID settings for all of the policies applied within a Sensor. The Customized Attacks option consolidates all user-customized attacks into one section for easy viewing.
To generate an IPS Policy Assignments report for a Sensor, do the following:
Steps:
Click the Manager tab from the Manager Home page.
Select <Admin Domain Name> → Reporting → Configuration Reports → IPS Policy Assignments.
Select the Report Format.
Select one or more Devices.
Tip
Sensor Policy Configuration Reports can be very long when multiple Sensors are selected. Trellix recommends selecting a single Sensor for ease of readability.
Tick one or more of the following based on what information you want to see in the report:
Customized Attacks
Exploit/DoS Policy
IPS Policy Detail
DoS Detail
Attack Set Profile Detail
Recon Attacks
Click Run.