Trellix IPS helps you identify long running processes, including in-progress and completed activities within your active Manager (or Central Manager). You can view/track scheduled processes as well as user initiated processes for activities. The long running processes that you can view in Manager are the ones that Trellix recommends you keep a track of.
If a long running activity includes several sub-activities, then Trellix IPS provides an activity log for each of the sub-activities. For example, an activity like signature update involves two long running sub-activities: downloading the signature set, and updating the signature set on all the Sensors that have the real time update enabled. These sub-activities are tracked separately and the status for each is displayed separately as well.
Trellix IPS identifies the following as long-running activities:
- Signature set download from Trellix IPS Update Server
- Signature set update on all active Sensors
- Sensor software download from Trellix IPS Update Server
- Sensor software update on all Sensors
- Cumulative policies update due to signature set download or editing of overriding rules
- Custom Attack Editor export to the Manager
- Report generation
- Data Backup using the Manager
- Data Restore using the Manager
- Database dump transfer/import for an MDR pair
- Database tuning using the Manager
- File maintenance
- Alert archival using the Manager
- Archived alerts restore using the Manager
- Alert data purge using the Manager
Note
Trellix IPS records the above mentioned activities for both scheduled as well as user initiated processes.