The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Importing Trellix IPS-defined custom attacks

Prev Next

To quickly address the latest threats, Trellix IPS periodically provides attack definitions before they are incorporated in official signature sets. These Trellix IPS-defined custom attacks (ID-UDS) are automatically deprecated when they are incorporated in a regular signature set.

Note

When an ID-UDS is deprecated, the Manager generates an Informational alert that you can view in the Attack Log.

Note

You cannot edit the attributes of an ID-UDS using the Custom Attack Editor.

You can export and import an ID-UDS just like you would with any other Custom Attacks.