DLP Server uses HTTPS as a secure communications channel with other Trellix servers. After installing DLP Server, configure the server to enable HTTPS.
Obtain a certificate file from the certificate authority. You can use the certificate request tool (Server Certificates → Actions → Create Certificate Request in IIS to obtain the certificate.
Trellix DLP Server software employs Microsoft Internet Information Services (IIS) as a web server, using HTTPS as a secure communications channel. HTTPS uses Secure Sockets Layer (SSL) to exchange information between the server and clients. To enable SSL/HTTPS in IIS you must configure the server with an SSL certificate file obtained from a certification authority.
Obtain a certificate file.
In IIS, go to Server Certificates → Actions → Create Certificate Request.
Fill in the required fields on the first page and click Next.
Review the second page. In most cases, you can accept the defaults. Click Next, then Finish.
Send your request to the certificate authority to order your certificate.
Install the certificate file.
In IIS, go to Server Certificates → Actions → Complete Certificate Request.
Enter the name of the file you received from the certificate authority.
In the Friendly name field, enter the name you want to appear in the IIS certificates list.
Select Personal for the certificate store value, then click OK.
The certificate appears in the IIS certificates list.
Create a binding.
This step is required to make the web site available by HTTPS.
In the Connections (left) panel in IIS, select DlpServer.
Select Actions → Bindings.
Select https, then click Edit.
Select your certificate (by Friendly name) from the SSL certificate drop-down list. Click OK.
We recommend configuring IIS to accept connections only from a list of specified Trellix DLP Discover, Trellix DLP Network Prevent, Trellix DLP Network Monitor, and other Trellix servers that need access to the DLP Servers. For information on restricting IIS to specific IPs, see Microsoft's IP Security documentation.