Registry and policy values for Endpoint Security Adaptive Threat Protection are mismatched
Last Modified: 2022-07-25 05:07:49 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Registry and policy values for Endpoint Security Adaptive Threat Protection are mismatched
Technical Articles ID:
KB95871
Last Modified: 2022-07-25 05:07:49 Etc/GMT Environment
Endpoint Security (ENS) Adaptive Threat Protection (ATP) 10.x
Problem
After the installation of ENS ATP, the local client shows the correct settings as set in the policy. But, the registry values don't match. Example: GUI: Might Be Malicious = 30 Most Likely Malicious = 15 Known Malicious = 1 Values in the registry: ContainLevel 50 = Unkown BlockLevel 30 = Might be Malicious CleanLevel 1 = Known Malicious Solution
If you experience this issue, create a Service Request and include this article number in the Problem Description field. You will be prompted to log on to the ServicePortal. IMPORTANT: The following files are required for Technical Support:
Workaround
To have the correct values assigned, make an arbitrary change to each of these settings (contain, block, and clean levels) and enforce the change on the client. Then, revert to the original settings.
Affected ProductsLanguages:This article is available in the following languages: |
|