You can use the Offline Trellix GTI tool to fetch ratings for isolated ePO - On-prem environments with no access to the internet. You can export SHA-1s of executable files and public key SHA-1s of certificates in the Application Control inventory to a file. The created file is compressed and encrypted.
On the ePO - On-prem console, select Menu → Application Control → Inventory.
On the By Applications tab, select Actions → Export Inventory for Offline GTI Tool to create the inventory file.
The file name is appended with the date and time when the file is created. Here is the syntax of the file name.
App-Control-Inventory-<year>-<month>-<day>_<hour>-<minute>-<second>.zipSave the inventory file.
Application Control and Change Control 8.0.x or later versions support SHA-256 values of executable files. Only SHA-1 values of executable files and certificates are exported in the inventory file.
Copy the inventory file to a system with access to the internet.