The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Task list for whitelisting noisy alerts

Prev Next

This task list summarizes the steps for whitelisting noisy SmartVision alerts (including data exfiltration alerts):

Prerequisites

To whitelist noisy alerts:
  1. Whitelist conditions that trigger only false-positive alerts.

    To eliminate all SmartVision alerts (including data exfiltration alerts) triggered by a particular combination of rule ID, traffic source, and traffic destination, you can create an entry in the alerts whitelist.

    See the following procedures:

  2. Whitelist upload destinations that trigger only false-positive data exfiltration alerts.