---
title: "Configuring Trellix Agent wake-up port in SELinux confinement mode"
slug: "configuring-trellix-agent-wake-up-port-in-selinux-confinement-mode-1"
updated: 2026-10-26T07:33:44Z
published: 2026-10-26T07:33:44Z
canonical: "docs.trellix.com/configuring-trellix-agent-wake-up-port-in-selinux-confinement-mode-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring Trellix Agent wake-up port in SELinux confinement mode

You can configure the wake-up port below 1024 in SELinux confinement mode on Trellix Agent 5.7.7 and later.

1. Install Trellix Agent using the **`install.sh -i -r`** command or upgrade Trellix Agent using the **`install.sh -u -r`** command to run the macmnsvc service as a root user.
2. [Upgrade to](/docs/upgrade-trellix-agent-selinux-rpm-package-1) or [install](/docs/installing-the-selinux-rpm-package) Trellix Agent SELinux 5.8.x RPM package.
3. Add port to the **`http_port_t`** list by using the **`semanage port -a -t http_port_t -p tcp <port numbr>`**.
4. Verify the port availability by using the **`semanage port -l | grep <port numbr>`** command. For example, **`semanage port -l | grep 100`**. The configured port should be added in the **`http_port_t`** list as,

```
http_port_t tcp 100, 80, 81, 443, 488, 8008, 8009, 8443, 9000
```

where 100 is the newly added port number.
5. Restart the system.
6. Login to the client system and run the **`cmdagent -e -p`** command.
7. Send an Agent wake-up call from ePO - On-prem.

Agent wake-up call on ePO - On-prem using reserved ports is successful .

: