Trellix IPS helps you identify long running processes, including in-progress and completed activities within your active Manager (or Central Manager). You can view/track scheduled processes as well as user initiated processes for activities. The long running processes that you can view in Manager are the ones that Trellix recommends you keep a track of.
If a long running activity includes several sub-activities, then Trellix IPS provides an activity log for each of the sub-activities. For example, an activity like signature update involves two long running sub-activities: downloading the signature set, and updating the signature set on all the Sensors that have the real time update enabled. These sub-activities are tracked separately and the status for each is displayed separately as well.
Trellix IPS identifies the following as long-running activities:
Signature set download from Trellix IPS Update Server
Signature set update on all active Sensors
Sensor software download from Trellix IPS Update Server
Sensor software update on all Sensors
Cumulative policies update due to signature set download or editing of overriding rules
Custom Attack Editor export to the Manager
Report generation
Data Backup using the Manager
Data Restore using the Manager
Database dump transfer/import for an MDR pair
Database tuning using the Manager
File maintenance
Alert archival using the Manager
Archived alerts restore using the Manager
Alert data purge using the Manager
Note
Trellix IPS records the above mentioned activities for both scheduled as well as user initiated processes.