The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Converting the on-premises Endpoint Security (HX) appliance into a TCP relay

Prev Next
To convert the on-premises Endpoint Security (HX) appliance into a TCP relay for the cloud Endpoint Security (HX) server using the CLI:
  1. Log in to the on-premises Endpoint Security (HX) appliance using the SSH protocol and the IP address or host name of the appliance's management interface.

  2. Enable CLI configuration mode.

    hostname > enablehostname # configure terminal
  3. Convert the on-premises Endpoint Security (HX) appliance into a TCP relay to the cloud Endpoint Security (HX) server:

    hostname # hx rproxy relay <ip-address-or-host-name>

    where <ip-address-or-host-name> is the host name or public IP address for the cloud Endpoint Security (HX) ecosystem. You collected this information for the cloud Endpoint Security (HX) ecosystem before the on-premises Endpoint Security (HX) appliance backup was uploaded to the cloud Endpoint Security (HX) server. See Recording the server address list settings of the Cloud Endpoint Security (HX) ecosystem .

  4. Save your changes:

    hostname (config) # write memory

Note

If the Endpoint Security (HX) appliance is in relay mode when it is upgraded, relay mode must be re-enabled after the upgrade completes.