The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages expected in November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Firewall Catalog — Location page

  • Published on Oct 6, 2026
  • 2 minute(s) read
Prev Next

You can add or edit a location in the Firewall Catalog. (Windows & macOS only)

Click + (Add) or - (Delete) to add or remove items.

Note

IPv6 addresses are supported on Windows systems only.

Option definitions
Option Definition
Name Specifies the name of the location. This field is required.
Connection isolation (Windows only) Blocks traffic on network adapters that don't match the group when an adapter is present that does match the group.

One use of this option is to block traffic generated by potentially undesirable sources outside the corporate network from entering the corporate network. Blocking traffic in this way is possible only if a rule preceding the group in the firewall policy hasn't already allowed it.

When connection isolation is enabled and a NIC matches the group, the group allows traffic only when one of the following applies:

  • Traffic matches an Allow Rule before the group.
  • Traffic traversing a NIC matches the group and there is a rule in or below the group that allows the traffic.

If no NIC matches the group, the group is ignored and rule matching continues.

Trellix ePO reachability Enables the group to match only if there is communication with the Trellix ePO - On-prem server and the FQDN of the server has been resolved.
Connection-specific DNS suffix Specifies a connection-specific DNS suffix in the format: example.com.
Default gateway Specifies a single IP address for a default gateway in IPv4 or IPv6 format.

For example:

  • IPv4 — 192.168.254.1
  • IPv6 — FD4A:A1B2:C3D4::E5F6 (Windows only)
DHCP server Specifies a single IP address for a DHCP server in IPv4 or IPv6 format.

For example:

  • IPv4 — 192.168.254.200
  • IPv6 — FD4A:A1B2:C3D4::E5F6 (Windows only)
DNS server Specifies a single IP address for a domain name server in IPv4 or IPv6 format.

For example:

  • IPv4 — 192.168.254.200
  • IPv6 — FD4A:A1B2:C3D4::E5F6 (Windows only)
Primary WINS server Specifies a single IP address for a primary WINS server in IPv4 or IPv6 format.

For example:

  • IPv4 — 192.168.254.200
  • IPv6 — FD4A:A1B2:C3D4::E5F6 (Windows only)
Secondary WINS server Specifies a single IP address for a secondary WINS server in IPv4 or IPv6 format.

For example:

  • IPv4 — 192.168.254.200
  • IPv6 — FD4A:A1B2:C3D4::E5F6 (Windows only)
Domain reachability (HTTPS) Requires that the specified domain is reachable using HTTPS.
Registry key (Windows only) Specifies the registry key and key value.
  1. In the first field, specify the registry key in the format:

    <ROOT>\<KEY>\[VALUE_NAME]

    • <ROOT> — Use the full root name, such as HKEY_LOCAL_MACHINE, and not the shortened HKLM.
    • <KEY> — Key name under the root.
    • [VALUE_NAME] — Name of the key value. If no value name is included, it is assumed to be the default value.
  2. In the second field after the equal sign, enter the data for the key value.

Tip

To copy a registry key for pasting, right-click a key in the Registry Editor (run regedit) and select Copy Key Name.

Notes Provides additional information about the group.
Last modified Indicates the date, time, and person responsible for the change.