Views:

Customize threat detections by enabling and disabling detection rules.

Tip
Tip
  • You can manage the detection rules of your appliances from Network Inventory in Trend Vision One. For more information, see the Trend Vision One online help.
  • Learn more about detection rules, by accessing the threat encyclopedia.
    To access the Threat Encyclopedia, in the management console go to HelpThreat EncyclopediaNetwork Content Inspection Rules or search for a specific rule number.
The following table outlines the available actions to configure detection rules in the Detection Rules screen (AdministrationMonitoring / ScanningDetection Rules).
Action Description
Export Detection Rules settings
Click Export to download a file containing your current Detection Rules settings.
Import Detection Rules settings
Click Import to import and replace all Detection Rules settings from file containing Detection Rules settings.
Change specific rule settings
Click an icon in the Current column to change the setting of specific rules, and then click Save Changes.
Change all rules to Default Status
Select Default Status from the Change all rules to menu, and then click Save Changes. This sets detection rules to default settings.
Trend Micro recommends using the Default Status setting.
Enable all detection rules
Select Enabled from the Change all rules to menu, and then click Save Changes to enable all detection rules.
Disable all detection rules
Select Disabled from the Change all rules to menu, and then click Save Changes to disable all detection rules.
View rule details
In the ID column, click the detection rule number to view more details about the rule in the Threat Encyclopedia.