The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Sensor response actions

Prev Next

There are multiple Sensor actions that are available for configuration per attack. These include the following:

  • Dropping Alert Packets — Only works in in-line mode. It will drop a detected attack packet and all subsequent packets in the same flow.

  • Quarantine — Sensor will quarantine or remediate a host as per the configurations in the Manager and the Sensor monitoring ports. Quarantine can be enabled per attack in the Policy Editors.

    For more information, see Response management.