---
title: "Test Access Protection installation"
slug: "test-access-protection-installation-2"
tags: ["ENS 10.7.x", "Install and Get Started"]
updated: 2026-10-06T16:09:45Z
published: 2026-10-06T16:09:45Z
canonical: "docs.trellix.com/test-access-protection-installation-2"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Test Access Protection installation

Test the software to make sure that Access Protection is enabled and can protect your system.

1. Log on to the system as a user with administrator rights.
2. Change the directory to the Threat Prevention bin directory.

`/opt/McAfee/ens/tp/bin`
3. Run the command:

`./mfetpcli --getapstatus`

If Access Protection status is **Enabled**, verify whether Access Protection is working.

To verify whether Access Protection is working, create a rule to block a file `/tmp/testfile1`.

`./mfetpcli --createaprule --rulename test1 --block enable --report enable --subrulename stest1 --subruletype file --operation create --includetargetfile /tmp/testfile1`

When you run the command from the `/opt/McAfee/ens/tp/bin` directory, a rule `test1` with a subrule `stest1` is created that blocks the user from creating a file or directory with the name `testfile1` in the `/tmp` directory.
4. Run the command: `touch /tmp/testfile1`

The following message is displayed: `cannot touch '/tmp/testfile1': Permission denied`

For more information about Access Protection commands, see the <cite><span>Trellix Endpoint Security (ENS) for Linux</span> product guide.</cite>