When you add a VLAN or CIDR block to a subinterface, Trellix Intrusion Prevention System treats the corresponding hosts as internal and builds a "protection domain" around them. All inbound traffic to and outbound traffic from those hosts is scanned using the policy associated with the sub-interface.
How policies are applied
- Published on Oct 5, 2026
- 1 minute(s) read
Was this article helpful?