Configure Threat Prevention with no connection to McAfee GTI

For systems with no network connection to McAfee GTI, such as air-gapped systems, you can improve performance by manually disabling McAfee GTI.

Disable McAfee GTI to eliminate unnecessary attempts to connect to McAfee GTI when no network path exists and reduce the impact on Endpoint Security performance.

Caution: Disabling McAfee GTI might result in increased false positives.


  1. Select MenuPolicyPolicy Catalog, then select Endpoint Security Threat Prevention from the Products list in the left pane.
  2. From the Category list in the right pane, select On-Access Scan.
  3. Click the Edit link for an editable policy.
  4. In the McAfee GTI section, deselect Enable McAfee GTI, then click Save.