You can edit or delete a threat detection policy that you configured in the Zscaler ITDR Admin Portal.

Any changes made to a threat detection policy can take a few hours to reflect on the endpoints.

Editing a Threat Detection Policy

To edit a threat detection policy:

1. Go to ITDR > Manage > Threat Detection.

2. Click the Edit icon for the threat detection policy you want to edit.

   See image.

   

   Close

3. In the policy window, modify the policy configuration per your requirements. You can modify:

   • Policy Details
   • Endpoint Selection
   • Active Directory

   See image.

   Close

4. Click Save.

Deleting a Threat Detection policy

To delete a threat detection policy:

1. Go to ITDR > Manage > Threat Detection.

2. Click the Delete icon for the policy you want to edit.

   See image.

   

   Close

3. Confirm your action when prompted.

   A confirmation message appears indicating that the policy was deleted successfully.