Trellix Private Global Threat Intelligence Cloud offers you the option to utilize the GTI information in a private cloud environment.
To integrate with Private GTI Cloud, you will need to configure Private Cloud Server IP to point to your Private Cloud instead of default name server IP. Private Cloud deployments are typically intended to operate in an air gapped environment.
The integration of Trellix IPS with Private GTI Cloud enables appliances and services to retrieve IP Reputation and File Reputation to more accurately filter communications and protect electronic communications and transactions between people, companies, and countries.
The Manager maps the country codes received from Private GTI Cloud IP Reputation to the country, and displays in the Attack Log page. IP Reputation can also be used to create Connection Limiting rules and SmartBlocking.
Note
This feature is only available in NS-series and Virtual IPS Sensors running Sensor software version 9.2 and above.