You can configure a web portal in your internal network that contains links to download security software. You can then configure the details of this portal in Trellix IPS. When a Sensor detects HTTP traffic from a quarantined host, it redirects the host to this portal.
With respect to Quarantine, the Sensor redirects HTTP traffic from a quarantined host throughout the quarantine duration even if the user has already installed all the software available through the remediation portal.
Click the Devices tab.
From the Domain drop-down list, select the domain you want to work in.
Select Global → IPS Device Settings → Quarantine → Remediation Portal.
Remediation portal settings.png "GUID-AAD03ADA-2917-4D27-BB41-1553F587505D-low.png")
Specify the Remediation Portal settings.
Option
Definition
Automatically Redirect to a Remediation Portal?
When selected, Sensor redirects a quarantined host to the remediation portal when it detects HTTP traffic from the host.
Remediation Portal IP Address
Enter the IPv4 address of the server hosting the remediation portal.
Remediation Portal URL
Type the entire path to the remediation portal including the IP address of the server.
Save
Saves the remediation portal configuration. This configuration applies to all the Sensors in the admin domain.
Note
Do a configuration update of the Sensors for the changes to take effect.