On August 31st, 2023, Trellix will no longer support the Active Response feature that enables cloud storage of endpoint logs.
Impact:
The Active Response Threat Workspace in ePO will no longer receive analyzed threat data from the cloud.
Remediation:
Customers are encouraged to migrate to Trellix EDR. For migration details, see the " Migrate from Active Response to Trellix EDR" section in the Trellix EDR Installation Guide.
For more information, see: KB96711 – Removal of the Active Response Storage Feature.